[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/runtime

[snyk-bot]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/core from 7.8.3 to 7.14.3	37 versions ahead of your current version	a month ago on 2021-05-17
@babel/plugin-transform-runtime from 7.11.0 to 7.14.3	20 versions ahead of your current version	a month ago on 2021-05-17
@babel/preset-env from 7.8.4 to 7.14.2	30 versions ahead of your current version	a month ago on 2021-05-12
@babel/runtime from 7.11.2 to 7.14.0	18 versions ahead of your current version	2 months ago on 2021-04-29

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

• 7.14.3 - 2021-05-17
  

  v7.14.3 (2021-05-17)

  🐛 Bug Fix

  • babel-core
    • #13321 Pass assumptions set in presets to plugins (@ nicolo-ribaudo)
  • babel-parser
    • #13326 fix: preserve tokensLength in tryParse (@ JLHwung)
    • #13325 Parse let declarations whose id starts with \ (@ nicolo-ribaudo)
  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block
    • #13303 Don't duplicate the base class when using constantSuper (@ nicolo-ribaudo)

  🏠 Internal

  • Other
    • #13313 chore: add class-static-block test262 mapping (@ JLHwung)
  • babel-plugin-transform-block-scoping
    • #13304 Add test for fixed block scoping issue (@ nicolo-ribaudo)

  🔬 Output optimization

  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-static-block, babel-preset-env
    • #13297 Compile static blocks without the intermediate priv field step (@ nicolo-ribaudo)

  Committers: 4

  • Babel Bot (@ babel-bot)
  • Bogdan Savluk (@ zxbodya)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
• 7.14.2 - 2021-05-12
  

  v7.14.2 (2021-05-12)

  Thanks @ liuyenwei, @ quickgiant, @ serut, and @ trinangkur for your first PRs!

  🐛 Bug Fix

  • babel-node
    • #13295 Fix: Only create @ babel/node IPC channel when needed (@ quickgiant)
  • babel-parser
    • #13284 Parse attributes of import expression with estree plugin (@ sosukesuzuki)
    • #13261 Fix invalid identifier name on unfinished escape (@ JLHwung)
  • babel-types
    • #13275 Support objects from other contexts in t.valueToNode (@ nicolo-ribaudo)
  • Other
    • #13274 [eslint] Don't crash on multiple @ babel/parser copies (@ nicolo-ribaudo)
  • babel-generator
    • #13269 Print parentheses around identifier let where necessary (@ Zalathar)

  💅 Polish

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
    • #13296 Better error for export * as ns without the correct plugin (@ JLHwung)

  📝 Documentation

  • #13253 [DOC] Add missing Monorepo configuration (@ serut)

  🏠 Internal

  • Other
    • #13289 Update lodash version for fixing security vulnerability (@ trinangkur)
  • babel-types
    • #13264 [babel-types] Update matchesPattern to account for this (@ liuyenwei)

  🏃‍♀️ Performance

  • babel-parser
    • #13262 Faster identifier tokenizing (@ JLHwung)
    • #13256 Refactor private name tokenizing (@ JLHwung)

  Committers: 9

  • Babel Bot (@ babel-bot)
  • Clark Jacobsohn (@ quickgiant)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Sosuke Suzuki (@ sosukesuzuki)
  • Stuart Cook (@ Zalathar)
  • Trinangkur Chatterjee (@ trinangkur)
  • Yen-Wei Liu (@ liuyenwei)
  • @ serut
• 7.14.0 - 2021-04-29
  

  v7.14.0 (2021-04-29)

  👓 Spec Compliance

  • babel-generator, babel-parser
    • #13209 [ts] Enforce order for the override modifier (@ nicolo-ribaudo)

  🚀 New Feature

  • babel-plugin-proposal-async-do-expressions
    • #13117 Implement async-do-expressions transform (@ JLHwung)
  • babel-core, babel-generator, babel-parser, babel-plugin-proposal-do-expressions, babel-plugin-syntax-async-do-expressions, babel-types
    • #13043 Parse async do expressions (@ JLHwung)
  • babel-preset-env
    • #13091 Enable class fields & private methods by default (@ nicolo-ribaudo)
  • babel-compat-data, babel-preset-env
    • #13176 Add private brand checks to shippedProposals (@ nicolo-ribaudo)
    • #13114 Add class static blocks to preset-env's shippedProposals (@ nicolo-ribaudo)
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-private-property-in-object, babel-plugin-syntax-private-property-in-object
    • #13172 Allow compiling #foo in obj without compiling private fields (@ nicolo-ribaudo)
  • babel-parser
    • #13113 babel-parser(ts): Add new plugin option dts: boolean (@ sosukesuzuki)
    • #13175 Materialize the class features in @ babel/parser. (@ JLHwung)
    • #13033 Introduce parser error codes (@ sosukesuzuki)
  • babel-helper-module-transforms, babel-helpers, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #12838 Implement importInterop: "node" option for module transforms (@ nicolo-ribaudo)
  • babel-generator, babel-parser, babel-traverse, babel-types
    • #13224 Support parsing Flow's Optional Indexed Access Types (@ gkz)
    • #13053 Support parsing Flow's Indexed Access Types (@ sosukesuzuki)
  • babel-parser, babel-traverse
    • #13195 Parse string export names by default (moduleStringNames) (@ nicolo-ribaudo)
  • babel-generator, babel-parser, babel-types
    • #13089 Support TypeScript 4.3 get/set type members (@ sosukesuzuki)
    • #13097 support TS 4.3 override syntax in class (@ g-plane)
    • #13096 support TS 4.3 static index signature in class (@ g-plane)

  🐛 Bug Fix

  • babel-generator
    • #13208 Prevent ForOfStatement from printing the forbidden sequence "for ( async of" (@ Zalathar)
    • #13169 fix: don't deduplicate comments with same start index (@ gzzhanghao)
  • babel-generator, babel-plugin-proposal-object-rest-spread, babel-preset-env
    • #13204 Simplify the special-case printing of single-param arrow functions (@ Zalathar)
  • babel-core
    • #13182 fix: Don't load browserslist in block-hoist-plugin (@ MichaReiser)

  💅 Polish

  • babel-cli, babel-core, babel-parser, babel-plugin-transform-classes, babel-preset-env, babel-preset-typescript
    • #13130 babel-parser: Add new internal ESLint rule to consistent error messages (@ sosukesuzuki)

  🏠 Internal

  • babel-parser
    • #13227 Add runFixtureTestsWithoutExactASTMatch in parser test runner (@ JLHwung)
    • #13163 babel-parser: Use this.isThisParam (@ sosukesuzuki)
    • #13200 refactor: avoid parsing logic on locations (@ JLHwung)
  • babel-helpers, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
    • #13190 Allow putting helpers in individual files (@ nicolo-ribaudo)
  • Other
    • #13183 chore: run coverage-test against node 16 (@ JLHwung)

  🏃‍♀️ Performance

  • babel-core
    • #13090 perf(core): check files before interacting with them (@ FauxFaux)
    • #13223 perf: avoid loadFullConfig when creating block hoist plugin (@ JLHwung)
  • babel-helper-validator-identifier
    • #13211 Improve isIdentifierName performance (@ JLHwung)

  🔬 Output optimization

  • babel-helper-create-class-features-plugin, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-async-generator-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-preset-env
    • #13194 Mark WeakMaps of private fields as pure (@ nicolo-ribaudo)
  • babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
    • #13201 Simplify the wrapRegExp helper for named groups (@ nicolo-ribaudo)

  Committers: 11

  • Babel Bot (@ babel-bot)
  • Chris West (@ FauxFaux)
  • George Zahariev (@ gkz)
  • Huáng Jùnliàng (@ JLHwung)
  • Jason (@ gzzhanghao)
  • Micha Reiser (@ MichaReiser)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Pig Fang (@ g-plane)
  • Simon Lydell (@ lydell)
  • Sosuke Suzuki (@ sosukesuzuki)
  • Stuart Cook (@ Zalathar)
• 7.13.16 - 2021-04-20
  Read more
• 7.13.15 - 2021-04-08
  Read more
• 7.13.14 - 2021-03-29
  Read more
• 7.13.13 - 2021-03-26
  Read more
• 7.13.10 - 2021-03-08
• 7.13.8 - 2021-02-26
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.16 - 2021-02-11
• 7.12.13 - 2021-02-03
• 7.12.10 - 2020-12-09
• 7.12.9 - 2020-11-24
• 7.12.8 - 2020-11-23
• 7.12.7 - 2020-11-20
• 7.12.3 - 2020-10-16
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.6 - 2020-09-03
• 7.11.5 - 2020-08-31
• 7.11.4 - 2020-08-20
• 7.11.1 - 2020-08-04
• 7.11.0 - 2020-07-30
• 7.10.5 - 2020-07-14
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.2 - 2020-05-30
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.0 - 2020-03-20
• 7.8.7 - 2020-03-05
• 7.8.6 - 2020-02-27
• 7.8.4 - 2020-01-30
• 7.8.3 - 2020-01-13

from @babel/core GitHub release notes

Package name: @babel/plugin-transform-runtime

• 7.14.3 - 2021-05-17
  Read more
• 7.14.2 - 2021-05-12
  Read more
• 7.13.15 - 2021-04-08
  Read more
• 7.13.10 - 2021-03-08
• 7.13.9 - 2021-03-01
• 7.13.8 - 2021-02-26
• 7.13.7 - 2021-02-24
• 7.13.6 - 2021-02-23
• 7.13.5 - 2021-02-23
• 7.13.4 - 2021-02-23
• 7.13.2 - 2021-02-23
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.15 - 2021-02-04
• 7.12.13 - 2021-02-03
• 7.12.10 - 2020-12-09
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.5 - 2020-08-31
• 7.11.0 - 2020-07-30

from @babel/plugin-transform-runtime GitHub release notes

Package name: @babel/preset-env

• 7.14.2 - 2021-05-12
  Read more
• 7.14.1 - 2021-05-04
  Read more
• 7.14.0 - 2021-04-29
  Read more
• 7.13.15 - 2021-04-08
  Read more
• 7.13.12 - 2021-03-22
  Read more
• 7.13.10 - 2021-03-08
• 7.13.9 - 2021-03-01
• 7.13.8 - 2021-02-26
• 7.13.5 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.16 - 2021-02-11
• 7.12.13 - 2021-02-03
• 7.12.11 - 2020-12-15
• 7.12.10 - 2020-12-09
• 7.12.7 - 2020-11-20
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.5 - 2020-08-31
• 7.11.0 - 2020-07-30
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.2 - 2020-05-30
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.5 - 2020-04-07
• 7.9.0 - 2020-03-20
• 7.8.7 - 2020-03-05
• 7.8.6 - 2020-02-27
• 7.8.4 - 2020-01-30

from @babel/preset-env GitHub release notes

Package name: @babel/runtime

• 7.14.0 - 2021-04-29
  Read more
• 7.13.17 - 2021-04-20
  Read more
• 7.13.16 - 2021-04-20
  Read more
• 7.13.10 - 2021-03-08
• 7.13.9 - 2021-03-01
• 7.13.8 - 2021-02-26
• 7.13.7 - 2021-02-24
• 7.13.6 - 2021-02-23
• 7.13.4 - 2021-02-23
• 7.13.2 - 2021-02-23
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.18 - 2021-02-18
• 7.12.17 - 2021-02-18
• 7.12.13 - 2021-02-03
• 7.12.5 - 2020-11-03
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.2 - 2020-08-05

from @babel/runtime GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs