[Snyk] Upgrade: lodash, , , , , , , , , , react, react-dom, semver, , , node-fetch, , , , babel-loader, cheerio, cookie-parser, mkdirp, copy-webpack-plugin, cross-env, directory-tree, dotenv, express, express-rate-limit, express-timeout-handler, flat, github-slugger, js-yaml, gray-matter, helmet, hot-shots, html-entities, linkinator, liquidjs, lunr-languages, mini-css-extract-plugin, morgan, redis, resolve-url-loader, rimraf, rss-parser, sass, sass-loader, style-loader, uuid, webpack #457

venkatarao-palaparthi · 2024-09-20T09:47:02Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

lodash
from 4.17.20 to 4.17.21 | 1 version ahead of your current version | 4 years ago
on 2021-02-20
@babel/core
from 7.12.13 to 7.25.2 | 91 versions ahead of your current version | 2 months ago
on 2024-07-30
@babel/plugin-proposal-class-properties
from 7.12.13 to 7.18.6 | 7 versions ahead of your current version | 2 years ago
on 2022-06-27
@babel/plugin-transform-modules-amd
from 7.12.13 to 7.24.7 | 24 versions ahead of your current version | 3 months ago
on 2024-06-05
@babel/plugin-transform-modules-commonjs
from 7.12.13 to 7.24.8 | 35 versions ahead of your current version | 2 months ago
on 2024-07-11
@babel/plugin-transform-react-jsx
from 7.12.13 to 7.25.2 | 31 versions ahead of your current version | 2 months ago
on 2024-07-30
@babel/plugin-transform-runtime
from 7.11.0 to 7.25.4 | 68 versions ahead of your current version | a month ago
on 2024-08-22
@babel/runtime
from 7.11.2 to 7.25.6 | 78 versions ahead of your current version | 22 days ago
on 2024-08-29
@babel/preset-env
from 7.12.13 to 7.25.4 | 78 versions ahead of your current version | a month ago
on 2024-08-22
@babel/preset-react
from 7.12.13 to 7.24.7 | 20 versions ahead of your current version | 3 months ago
on 2024-06-05
react
from 17.0.1 to 17.0.2 | 1 version ahead of your current version | 3 years ago
on 2021-03-22
react-dom
from 17.0.1 to 17.0.2 | 1 version ahead of your current version | 3 years ago
on 2021-03-22
semver
from 5.7.1 to 5.7.2 | 1 version ahead of your current version | a year ago
on 2023-07-10
@graphql-inspector/core
from 2.3.0 to 2.9.0 | 8 versions ahead of your current version | 3 years ago
on 2021-09-02
@graphql-tools/load
from 6.2.5 to 6.2.8 | 56 versions ahead of your current version | 3 years ago
on 2021-04-14
node-fetch
from 2.6.1 to 2.7.0 | 13 versions ahead of your current version | a year ago
on 2023-08-23
@octokit/rest
from 16.38.1 to 16.43.2 | 15 versions ahead of your current version | 4 years ago
on 2020-06-24
@primer/css
from 15.1.0 to 15.2.0 | 13 versions ahead of your current version | 4 years ago
on 2020-09-21
@primer/octicons
from 11.0.0 to 11.3.0 | 20 versions ahead of your current version | 4 years ago
on 2021-02-02
babel-loader
from 8.1.0 to 8.3.0 | 7 versions ahead of your current version | 2 years ago
on 2022-11-03
cheerio
from 1.0.0-rc.3 to 1.0.0 | 10 versions ahead of your current version | a month ago
on 2024-08-09
cookie-parser
from 1.4.5 to 1.4.6 | 1 version ahead of your current version | 3 years ago
on 2021-11-16
mkdirp
from 1.0.3 to 1.0.4 | 1 version ahead of your current version | 4 years ago
on 2020-04-03
copy-webpack-plugin
from 6.0.3 to 6.4.1 | 10 versions ahead of your current version | 4 years ago
on 2020-12-16
cross-env
from 7.0.2 to 7.0.3 | 1 version ahead of your current version | 4 years ago
on 2020-12-01
directory-tree
from 2.2.6 to 2.3.1 | 5 versions ahead of your current version | 3 years ago
on 2021-08-12
dotenv
from 8.2.0 to 8.6.0 | 5 versions ahead of your current version | 3 years ago
on 2021-05-05
express
from 4.17.1 to 4.19.2 | 9 versions ahead of your current version | 6 months ago
on 2024-03-25
express-rate-limit
from 5.1.3 to 5.5.1 | 10 versions ahead of your current version | 3 years ago
on 2021-11-06
express-timeout-handler
from 2.2.0 to 2.2.2 | 1 version ahead of your current version | 3 years ago
on 2021-07-26
flat
from 5.0.0 to 5.0.2 | 2 versions ahead of your current version | 4 years ago
on 2020-08-06
github-slugger
from 1.2.1 to 1.5.0 | 3 versions ahead of your current version | 2 years ago
on 2022-10-25
js-yaml
from 3.14.0 to 3.14.1 | 1 version ahead of your current version | 4 years ago
on 2020-12-07
gray-matter
from 4.0.2 to 4.0.3 | 1 version ahead of your current version | 3 years ago
on 2021-04-24
helmet
from 3.21.2 to 3.23.3 | 7 versions ahead of your current version | 4 years ago
on 2020-06-26
hot-shots
from 8.2.0 to 8.5.2 | 8 versions ahead of your current version | 3 years ago
on 2021-09-26
html-entities
from 1.2.1 to 1.4.0 | 5 versions ahead of your current version | 4 years ago
on 2020-12-19
linkinator
from 2.13.1 to 2.16.2 | 16 versions ahead of your current version | 3 years ago
on 2021-11-14
liquidjs
from 9.22.1 to 9.43.0 | 45 versions ahead of your current version | 2 years ago
on 2022-11-27
lunr-languages
from 1.4.0 to 1.14.0 | 8 versions ahead of your current version | a year ago
on 2023-10-09
mini-css-extract-plugin
from 0.9.0 to 0.12.0 | 7 versions ahead of your current version | 4 years ago
on 2020-10-07
morgan
from 1.9.1 to 1.10.0 | 1 version ahead of your current version | 5 years ago
on 2020-03-20
redis
from 3.0.2 to 3.1.2 | 3 versions ahead of your current version | 3 years ago
on 2021-04-20
resolve-url-loader
from 3.1.2 to 3.1.5 | 3 versions ahead of your current version | 2 years ago
on 2022-12-02
rimraf
from 3.0.0 to 3.0.2 | 2 versions ahead of your current version | 5 years ago
on 2020-02-09
rss-parser
from 3.12.0 to 3.13.0 | 1 version ahead of your current version | a year ago
on 2023-04-11
sass
from 1.26.3 to 1.77.8 | 154 versions ahead of your current version | 2 months ago
on 2024-07-11
sass-loader
from 9.0.2 to 9.0.3 | 1 version ahead of your current version | 4 years ago
on 2020-08-05
style-loader
from 1.2.1 to 1.3.0 | 1 version ahead of your current version | 4 years ago
on 2020-10-03
uuid
from 8.3.0 to 8.3.2 | 3 versions ahead of your current version | 4 years ago
on 2020-12-08
webpack
from 4.44.0 to 4.47.0 | 5 versions ahead of your current version | a year ago
on 2023-09-06

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Code Injection SNYK-JS-LODASH-1040724	539	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-1070800	539	No Known Exploit
Prototype Pollution SNYK-JS-AJV-584908	539	No Known Exploit
Prototype Poisoning SNYK-JS-QS-3153490	539	Proof of Concept
Information Exposure SNYK-JS-NODEFETCH-2342118	539	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	539	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	539	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	539	Proof of Concept
Prototype Pollution SNYK-JS-FLAT-596927	539	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	539	Proof of Concept
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	539	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	539	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	539	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	539	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-1298035	539	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REDIS-1255645	539	No Known Exploit
Open Redirect SNYK-JS-EXPRESS-6474509	539	No Known Exploit
Prototype Pollution SNYK-JS-XML2JS-5414874	539	Proof of Concept

Release notes

Package name: lodash

4.17.21 - 2021-02-20
Bump to v4.17.21
4.17.20 - 2020-08-13
Bump to v4.17.20.

from lodash GitHub release notes

Package name: @babel/core

7.25.2 - 2024-07-30
v7.25.2 (2024-07-30)

🐛 Bug Fix
- babel-core, babel-traverse
  - #16695 Ensure that requeueComputedKeyAndDecorators is available (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.24.9 - 2024-07-15
v7.24.9 (2024-07-15)

🐛 Bug Fix
- babel-core, babel-standalone
  - #16639 Avoid require() call in @ babel/standalone bundle (@ nicolo-ribaudo)
- babel-types
  - #16638 fix: provide legacy typings for TS < 4.1 (@ JLHwung)
💅 Polish
- babel-generator, babel-plugin-transform-optional-chaining
  - #16617 Avoid extra parens in TS as/satisfies (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-module-transforms
  - #16629 Lazy top-level initializations for module transforms (@ guybedford)
Committers: 5
- Babel Bot (@ babel-bot)
- Guy Bedford (@ guybedford)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.4 - 2024-04-03
7.24.3 - 2024-03-20
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-12
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.5 - 2022-02-17
7.17.4 - 2022-02-15
7.17.3 - 2022-02-15
7.17.2 - 2022-02-08
7.17.0 - 2022-02-02
7.16.12 - 2022-01-22
7.16.10 - 2022-01-19
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.5 - 2021-09-04
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.8 - 2021-07-20
7.14.6 - 2021-06-14
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.14.0 - 2021-04-29
7.13.16 - 2021-04-20
7.13.15 - 2021-04-08
7.13.14 - 2021-03-29
7.13.13 - 2021-03-26
7.13.10 - 2021-03-08
7.13.8 - 2021-02-26
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03

from @babel/core GitHub release notes

Package name: @babel/plugin-proposal-class-properties

7.18.6 - 2022-06-27
7.17.12 - 2022-05-16
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.14.5 - 2021-06-09
7.13.0 - 2021-02-22
7.12.13 - 2021-02-03

from @babel/plugin-proposal-class-properties GitHub release notes

Package name: @babel/plugin-transform-modules-amd

7.24.7 - 2024-06-05
v7.24.7 (2024-06-05)

🐛 Bug Fix
- babel-node
  - #16554 Allow extra flags in babel-node (@ nicolo-ribaudo)
- babel-traverse
  - #16522 fix: incorrect constantViolations with destructuring (@ liuxingbaoyu)
- babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  - #16524 fix: Transform using in switch correctly (@ liuxingbaoyu)
🏠 Internal
- babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16525 Delete unused array helpers (@ blakewilson)
Committers: 7
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- @ liuxingbaoyu
7.24.6 - 2024-05-24
v7.24.6 (2024-05-24)

Thanks @ amjed-98, @ blakewilson, @ coelhucas, and @ SukkaW for your first PRs!

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16514 Fix source maps for private member expressions (@ nicolo-ribaudo)
- babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  - #16515 Fix source maps for template literals (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16485 Support undecorated static accessor in anonymous classes (@ JLHwung)
  - #16484 Fix decorator bare yield await (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16483 Fix: throw TypeError if addInitializer is called after finished (@ JLHwung)
- babel-parser, babel-plugin-transform-typescript
  - #16476 fix: Correctly parse cls.fn<C> = x (@ liuxingbaoyu)
🏠 Internal
- babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16501 Generate helper metadata at build time (@ nicolo-ribaudo)
- babel-helpers
  - #16499 Add tsconfig.json for @ babel/helpers/src/helpers (@ nicolo-ribaudo)
- babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16495 Move all runtime helpers to individual files (@ nicolo-ribaudo)
- babel-parser, babel-traverse
  - #16482 Statically generate boilerplate for bitfield accessors (@ nicolo-ribaudo)
- Other
  - #16466 Migrate import assertions syntax (@ JLHwung)
Committers: 9
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Lucas Coelho (@ coelhucas)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- Zzzen (@ Zzzen)
- @ liuxingbaoyu
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.23.3 - 2023-11-09
7.23.0 - 2023-09-25
7.22.5 - 2023-06-08
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.20.11 - 2022-12-23
7.20.7 - 2022-12-22
7.19.6 - 2022-10-20
7.18.6 - 2022-06-27
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.14.5 - 2021-06-09
7.14.2 - 2021-05-12
7.14.0 - 2021-04-29
7.13.0 - 2021-02-22
7.12.13 - 2021-02-03

from @babel/plugin-transform-modules-amd GitHub release notes

Package name: @babel/plugin-transform-modules-commonjs

7.24.8 - 2024-07-11
v7.24.8 (2024-07-11)

Thanks @ H0onnn, @ jkup and @ SreeXD for your first pull requests!

👓 Spec Compliance
- babel-parser
  - #16567 Do not use strict mode in TS declare (@ liuxingbaoyu)
🐛 Bug Fix
- babel-generator
  - #16630 Correctly print parens around in in for heads (@ nicolo-ribaudo)
  - #16626 Fix printing of comments in await using (@ nicolo-ribaudo)
  - #16591 fix typescript code generation for yield expression inside type expre… (@ SreeXD)
- babel-parser
  - #16613 Disallow destructuring assignment in using declarations (@ H0onnn)
  - #16490 fix: do not add .value: undefined to regexp literals (@ liuxingbaoyu)
- babel-types
  - #16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@ nicolo-ribaudo)
- babel-plugin-transform-typescript
  - #16566 fix: Correctly handle export import x = (@ liuxingbaoyu)
💅 Polish
- babel-generator
  - #16625 Avoid unnecessary parens around async in for await (@ nicolo-ribaudo)
- babel-traverse
  - #16619 Avoid checking Scope.globals multiple times (@ liuxingbaoyu)
Committers: 9
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Jon Kuperman (@ jkup)
- Nagendran N (@ SreeXD)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- @ H0onnn
- @ liuxingbaoyu
7.24.7 - 2024-06-05
v7.24.7 (2024-06-05)

🐛 Bug Fix
- babel-node
  - #16554 Allow extra flags in babel-node (@ nicolo-ribaudo)
- babel-traverse
  - #16522 fix: incorrect constantViolations with destructuring (@ liuxingbaoyu)
- babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  - #16524 fix: Transform using in switch correctly (@ liuxingbaoyu)
🏠 Internal
- babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16525 Delete unused array helpers (@ blakewilson)
Committers: 7
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- @ liuxingbaoyu
7.24.6 - 2024-05-24
v7.24.6 (2024-05-24)

Thanks @ amjed-98, @ blakewilson, @ coelhucas, and @ SukkaW for your first PRs!

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16514 Fix source maps for private member expressions (@ nicolo-ribaudo)
- babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  - #16515 Fix source maps for template literals (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16485 Support undecorated static accessor in anonymous classes (@ JLHwung)
  - #16484 Fix decorator bare yield await (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16483 Fix: throw TypeError if addInitializer is called after finished (@ JLHwung)
- babel-parser, babel-plugin-transform-typescript
  - #16476 fix: Correctly parse cls.fn<C> = x (@ liuxingbaoyu)
🏠 Internal
- babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16501 Generate helper metadata at build time (@ nicolo-ribaudo)
- babel-helpers
  - #16499 Add tsconfig.json for @ babel/helpers/src/helpers (@ nicolo-ribaudo)
- babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16495 Move all runtime helpers to individual files (@ nicolo-ribaudo)
- babel-parser, babel-traverse
  - #16482 Statically generate boilerplate for bitfield accessors (@ nicolo-ribaudo)
- Other
  - #16466 Migrate import assertions syntax (@ JLHwung)
Committers: 9
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Lucas Coelho (@ coelhucas)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- Zzzen (@ Zzzen)
- @ liuxingbaoyu
7.24.1 - 2024-03-19
7.23.3 - 2023-11-09
7.23.0 - 2023-09-25
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.5 - 2023-06-08
7.21.5 - 2023-04-28
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.2 - 2023-02-23
7.20.11 - 2022-12-23
7.20.7 - 2022-12-22
7.19.6 - 2022-10-20
7.18.6 - 2022-06-27
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.9 - 2022-04-06
7.17.7 - 2022-03-14
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.5 - 2021-06-09
7.14.0 - 2021-04-29
7.13.8 - 2021-02-26
7.13.0 - 2021-02-22
7.12.13 - 2021-02-03

from @babel/plugin-transform-modules-commonjs GitHub release notes

Package name: @babel/plugin-transform-react-jsx

7.25.2 - 2024-07-30
v7.25.2 (2024-07-30)

🐛 Bug Fix
- babel-core, babel-traverse
  - #16695 Ensure that requeueComputedKeyAndDecorators is available (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.23.4 - 2023-11-20
7.22.15 - 2023-09-04
7.22.5 - 2023-06-08
7.22.3 - 2023-05-27
7.22.0 - 2023-05-26
7.21.5 - 2023-04-28
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.0 - 2023-02-20
7.20.13 - 2023-01-21
7.20.7 - 2022-12-22
7.19.0 - 2022-09-05
7.18.10 - 2022-08-01
7.18.6 - 2022-06-27
7.17.12 - 2022-05-16
7.17.3 - 2022-02-15
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.14.9 - 2021-08-01
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.13.12 - 2021-03-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03

from @babel/plugin-transform-react-jsx GitHub release notes

Package name: @babel/plugin-transform-runtime

7.25.4 - 2024-08-22
v7.25.4 (2024-08-22)

🐛 Bug Fix
- babel-traverse
  - #16756 fix: Skip computed key when renaming (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16755 fix: Decorator 2018-09 may throw an exception (@ liuxingbaoyu)
- babel-types
  - #16710 Visit AST fields nodes according to their syntactical order (@ nicolo-ribaudo)
- babel-generator
  - #16709 Print semicolon after TS export namespace as A (@ nicolo-ribaudo)
💅 Polish
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
  - #16722 Avoid unnecessary parens around sequence expressions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-transform-class-properties
  - #16714 Avoid unnecessary parens around exported arrow functions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread
  - #16712 Avoid printing unnecessary parens around object destructuring (@ nicolo-ribaudo)
🔬 Output optimization
- babel-generator
  - #16740 Avoid extra spaces between comments/regexps in compact mode (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.3 - 2024-03-20
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.4 - 2023-11-20
7.23.3 - 2023-11-09
7.23.2 - 2023-10-11
7.22.15 - 2023-09-04
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.4 - 2023-05-29
7.22.2 - 2023-05-26
7.22.0 - 2023-05-26
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.0 - 2023-02-20
7.19.6 - 2022-10-20
7.19.1 - 2022-09-14
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.0 - 2022-02-02
7.16.10 - 2022-01-19
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.4 - 2021-11-16
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.0 - 2021-08-04
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.13.15 - 2021-04-08
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.8 - 2021-02-26
7.13.7 - 2021-02-24
7.13.6 - 2021-02-23
7.13.5 - 2021-02-23

Snyk has created this PR to upgrade: - lodash from 4.17.20 to 4.17.21. See this package in npm: https://www.npmjs.com/package/lodash - @babel/core from 7.12.13 to 7.25.2. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/plugin-proposal-class-properties from 7.12.13 to 7.18.6. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-class-properties - @babel/plugin-transform-modules-amd from 7.12.13 to 7.24.7. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-modules-amd - @babel/plugin-transform-modules-commonjs from 7.12.13 to 7.24.8. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-modules-commonjs - @babel/plugin-transform-react-jsx from 7.12.13 to 7.25.2. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-react-jsx - @babel/plugin-transform-runtime from 7.11.0 to 7.25.4. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-runtime - @babel/runtime from 7.11.2 to 7.25.6. See this package in npm: https://www.npmjs.com/package/@babel/runtime - @babel/preset-env from 7.12.13 to 7.25.4. See this package in npm: https://www.npmjs.com/package/@babel/preset-env - @babel/preset-react from 7.12.13 to 7.24.7. See this package in npm: https://www.npmjs.com/package/@babel/preset-react - react from 17.0.1 to 17.0.2. See this package in npm: https://www.npmjs.com/package/react - react-dom from 17.0.1 to 17.0.2. See this package in npm: https://www.npmjs.com/package/react-dom - semver from 5.7.1 to 5.7.2. See this package in npm: https://www.npmjs.com/package/semver - @graphql-inspector/core from 2.3.0 to 2.9.0. See this package in npm: https://www.npmjs.com/package/@graphql-inspector/core - @graphql-tools/load from 6.2.5 to 6.2.8. See this package in npm: https://www.npmjs.com/package/@graphql-tools/load - node-fetch from 2.6.1 to 2.7.0. See this package in npm: https://www.npmjs.com/package/node-fetch - @octokit/rest from 16.38.1 to 16.43.2. See this package in npm: https://www.npmjs.com/package/@octokit/rest - @primer/css from 15.1.0 to 15.2.0. See this package in npm: https://www.npmjs.com/package/@primer/css - @primer/octicons from 11.0.0 to 11.3.0. See this package in npm: https://www.npmjs.com/package/@primer/octicons - babel-loader from 8.1.0 to 8.3.0. See this package in npm: https://www.npmjs.com/package/babel-loader - cheerio from 1.0.0-rc.3 to 1.0.0. See this package in npm: https://www.npmjs.com/package/cheerio - cookie-parser from 1.4.5 to 1.4.6. See this package in npm: https://www.npmjs.com/package/cookie-parser - mkdirp from 1.0.3 to 1.0.4. See this package in npm: https://www.npmjs.com/package/mkdirp - copy-webpack-plugin from 6.0.3 to 6.4.1. See this package in npm: https://www.npmjs.com/package/copy-webpack-plugin - cross-env from 7.0.2 to 7.0.3. See this package in npm: https://www.npmjs.com/package/cross-env - directory-tree from 2.2.6 to 2.3.1. See this package in npm: https://www.npmjs.com/package/directory-tree - dotenv from 8.2.0 to 8.6.0. See this package in npm: https://www.npmjs.com/package/dotenv - express from 4.17.1 to 4.19.2. See this package in npm: https://www.npmjs.com/package/express - express-rate-limit from 5.1.3 to 5.5.1. See this package in npm: https://www.npmjs.com/package/express-rate-limit - express-timeout-handler from 2.2.0 to 2.2.2. See this package in npm: https://www.npmjs.com/package/express-timeout-handler - flat from 5.0.0 to 5.0.2. See this package in npm: https://www.npmjs.com/package/flat - github-slugger from 1.2.1 to 1.5.0. See this package in npm: https://www.npmjs.com/package/github-slugger - js-yaml from 3.14.0 to 3.14.1. See this package in npm: https://www.npmjs.com/package/js-yaml - gray-matter from 4.0.2 to 4.0.3. See this package in npm: https://www.npmjs.com/package/gray-matter - helmet from 3.21.2 to 3.23.3. See this package in npm: https://www.npmjs.com/package/helmet - hot-shots from 8.2.0 to 8.5.2. See this package in npm: https://www.npmjs.com/package/hot-shots - html-entities from 1.2.1 to 1.4.0. See this package in npm: https://www.npmjs.com/package/html-entities - linkinator from 2.13.1 to 2.16.2. See this package in npm: https://www.npmjs.com/package/linkinator - liquidjs from 9.22.1 to 9.43.0. See this package in npm: https://www.npmjs.com/package/liquidjs - lunr-languages from 1.4.0 to 1.14.0. See this package in npm: https://www.npmjs.com/package/lunr-languages - mini-css-extract-plugin from 0.9.0 to 0.12.0. See this package in npm: https://www.npmjs.com/package/mini-css-extract-plugin - morgan from 1.9.1 to 1.10.0. See this package in npm: https://www.npmjs.com/package/morgan - redis from 3.0.2 to 3.1.2. See this package in npm: https://www.npmjs.com/package/redis - resolve-url-loader from 3.1.2 to 3.1.5. See this package in npm: https://www.npmjs.com/package/resolve-url-loader - rimraf from 3.0.0 to 3.0.2. See this package in npm: https://www.npmjs.com/package/rimraf - rss-parser from 3.12.0 to 3.13.0. See this package in npm: https://www.npmjs.com/package/rss-parser - sass from 1.26.3 to 1.77.8. See this package in npm: https://www.npmjs.com/package/sass - sass-loader from 9.0.2 to 9.0.3. See this package in npm: https://www.npmjs.com/package/sass-loader - style-loader from 1.2.1 to 1.3.0. See this package in npm: https://www.npmjs.com/package/style-loader - uuid from 8.3.0 to 8.3.2. See this package in npm: https://www.npmjs.com/package/uuid - webpack from 4.44.0 to 4.47.0. See this package in npm: https://www.npmjs.com/package/webpack See this project in Snyk: https://app.snyk.io/org/palaparthi.venkat153/project/11ceca13-9564-4447-9818-bba288eabfda?utm_source=github&utm_medium=referral&page=upgrade-pr

github-actions bot added the triage label Sep 20, 2024

Are you sure you want to change the base?

Conversation

venkatarao-palaparthi commented Sep 20, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.24.9 (2024-07-15)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

Committers: 7

v7.24.6 (2024-05-24)

🐛 Bug Fix

🏠 Internal

Committers: 9

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

Committers: 7

v7.24.6 (2024-05-24)

🐛 Bug Fix

🏠 Internal

Committers: 9

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4