fix(deps): update dependency @babel/traverse to v7.23.2 [security] #4361

renovate · 2024-02-25T09:52:22Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/traverse (source)	`7.18.5` -> `7.23.2`

GitHub Vulnerability Alerts

CVE-2023-45133

Impact

Using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that rely on the path.evaluate()or path.evaluateTruthy() internal Babel methods.

Known affected plugins are:

@babel/plugin-transform-runtime
@babel/preset-env when using its useBuiltIns option
Any "polyfill provider" plugin that depends on @babel/helper-define-polyfill-provider, such as babel-plugin-polyfill-corejs3, babel-plugin-polyfill-corejs2, babel-plugin-polyfill-es-shims, babel-plugin-polyfill-regenerator

No other plugins under the @babel/ namespace are impacted, but third-party plugins might be.

Users that only compile trusted code are not impacted.

Patches

The vulnerability has been fixed in @babel/traverse@7.23.2.

Babel 6 does not receive security fixes anymore (see Babel's security policy), hence there is no patch planned for babel-traverse@6.

Workarounds

Upgrade @babel/traverse to v7.23.2 or higher. You can do this by deleting it from your package manager's lockfile and re-installing the dependencies. @babel/core >=7.23.2 will automatically pull in a non-vulnerable version.
If you cannot upgrade @babel/traverse and are using one of the affected packages mentioned above, upgrade them to their latest version to avoid triggering the vulnerable code path in affected @babel/traverse versions:
- @babel/plugin-transform-runtime v7.23.2
- @babel/preset-env v7.23.2
- @babel/helper-define-polyfill-provider v0.4.3
- babel-plugin-polyfill-corejs2 v0.4.6
- babel-plugin-polyfill-corejs3 v0.8.5
- babel-plugin-polyfill-es-shims v0.10.0
- babel-plugin-polyfill-regenerator v0.5.3

Release Notes

babel/babel (@babel/traverse)

`v7.23.2`

Compare Source

🐛 Bug Fix

babel-traverse
- #16033 Only evaluate own String/Number/Math methods (@nicolo-ribaudo)
babel-preset-typescript
- #16022 Rewrite .tsx extension when using rewriteImportExtensions (@jimmydief)
babel-helpers
- #16017 Fix: fallback to typeof when toString is applied to incompatible object (@JLHwung)
babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #16025 Avoid override mistake in namespace imports (@nicolo-ribaudo)

`v7.23.0`

Compare Source

🚀 New Feature

babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import
- #15870 Support transforming import source for wasm (@nicolo-ribaudo)
babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
- #15878 Implement import defer proposal transform support (@nicolo-ribaudo)
babel-generator, babel-parser, babel-types
- #15845 Implement import defer parsing support (@nicolo-ribaudo)
- #15829 Add parsing support for the "source phase imports" proposal (@nicolo-ribaudo)
babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types
- #15682 Add createImportExpressions parser option (@JLHwung)
babel-standalone
- #15671 Pass through nonce to the transformed script element (@JLHwung)
babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types
- #15751 Add support for optional chain in assignments (@nicolo-ribaudo)
babel-helpers, babel-plugin-proposal-decorators
- #15895 Implement the "decorator metadata" proposal (@nicolo-ribaudo)
babel-traverse, babel-types
- #15893 Add t.buildUndefinedNode (@liuxingbaoyu)
babel-preset-typescript
- #15913 Add rewriteImportExtensions option to TS preset (@nicolo-ribaudo)
babel-parser
- #15896 Allow TS tuples to have both labeled and unlabeled elements (@yukukotani)

🐛 Bug Fix

babel-plugin-transform-block-scoping
- #15962 fix: transform-block-scoping captures the variables of the method in the loop (@liuxingbaoyu)

💅 Polish

babel-traverse
- #15797 Expand evaluation of global built-ins in @babel/traverse (@lorenzoferre)
babel-plugin-proposal-explicit-resource-management
- #15985 Improve source maps for blocks with using declarations (@nicolo-ribaudo)

🔬 Output optimization

babel-core, babel-helper-module-transforms, babel-plugin-transform-async-to-generator, babel-plugin-transform-classes, babel-plugin-transform-dynamic-import, babel-plugin-transform-function-name, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-inline-elements, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env
- #15984 Inline exports.XXX = update in simple variable declarations (@nicolo-ribaudo)

`v7.22.20`

Compare Source

🏠 Internal

babel-helper-validator-identifier
- #15973 Remove special-casing of U+200C and U+200D (@nicolo-ribaudo)
babel-plugin-transform-dotall-regex
- #15974 Update Unicode test fixtures (@JLHwung)

↩️ Revert

babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
- #15979 Revert "Improve output when wrapping functions" (@jjonescz)

`v7.22.19`

Compare Source

v7.22.19 (2023-09-14)

Re-published 7.22.18, due to a releasing error.

`v7.22.18`

Compare Source

🐛 Bug Fix

babel-helper-validator-identifier
- #15957 Update identifier name definitions to Unicode 15.1 (@JLHwung)
babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
- #15898 Fix transform of named import with shadowed namespace import (@dhlolo)

↩️ Revert

#15965 Revert Node.js 20.6.0 bug workaround (@nicolo-ribaudo)

`v7.22.17`

Compare Source

🐛 Bug Fix

babel-core
- #15947 Fix compatibility with Node.js 20.6 (@nicolo-ribaudo)
babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
- #15941 Fix compiling duplicate ns imports to lazy CommonJS (@nicolo-ribaudo)
babel-types
- #15920 Make ClassDeclaration["id"] optional in babel-types (@jordanbtucker)

🔬 Output optimization

babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
- #15922 Improve output when wrapping functions (e.g. async functions) (@liuxingbaoyu)

`v7.22.15`

Compare Source

🐛 Bug Fix

babel-core
- #15923 Only perform config loading re-entrancy check for cjs (@nicolo-ribaudo)

🏠 Internal

babel-cli, babel-core, babel-generator, babel-helper-builder-binary-assignment-operator-visitor, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-helper-validator-option, babel-helpers, babel-node, babel-parser, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-async-generator-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-for-of, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-property-mutators, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env, babel-preset-flow, babel-preset-react, babel-preset-typescript, babel-register, babel-standalone, babel-template, babel-traverse, babel-types
- #15892 Add explicit .ts/.js extension to all imports in src (@nicolo-ribaudo)

`v7.22.11`

Compare Source

🐛 Bug Fix

babel-plugin-transform-typescript
- #15882 Fix: fully remove TS nested type-only exported namespaces (@yangguansen)
babel-types
- #15867 fix: definition of TS function type params (@danez)
babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object
- #15858 fix(standalone): strip archived syntax plugins (@JLHwung)
babel-core
- #15850 Support configuring cache in ESM configs (@nicolo-ribaudo)

🏠 Internal

babel-parser
- #10940 Do not record trailing comma pos when maybeAsyncArrow: false (@JLHwung)
babel-core, babel-helper-compilation-targets, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decorators, babel-preset-env, babel-preset-react, babel-register, babel-traverse, babel-types
- #15872 enable jest/no-standalone-expect (@JLHwung)
babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-modules-commonjs, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #15833 bump json5, terser and webpack, further minimize babel helpers (@JLHwung)
Other
- #15846 Use Babel 8.0 alpha to build babel (@JLHwung)
- #15856 Exclude redundant files from publish process (@JLHwung)

🔬 Output optimization

babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-optional-chaining, babel-preset-env
- #15871 Simplify ?. output when chain result is ignored (@nicolo-ribaudo)

`v7.22.10`

Compare Source

🐛 Bug Fix

babel-plugin-transform-typescript
- #15799 [ts] Strip type-only namespaces (@nicolo-ribaudo)
- #15798 [ts] Fix compiling extended exported nested namespace (@nicolo-ribaudo)
babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
- #15701 Memoize class binding when compiling private methods and static elements (@JLHwung)

💅 Polish

babel-cli
- #15824 Add meta object to @babel/eslint-plugin (@JLHwung)
babel-traverse, babel-types
- #15661 Improve the type definition of path.isX (@liuxingbaoyu)
babel-generator, babel-types
- #15776 improve SourceLocation typing (@JLHwung)

🏠 Internal

Other
- #15818 build: generate flow typings in prepublish job (@JLHwung)
- #15777 chore: bump dev dependencies and remove .eslintignore (@JLHwung)
babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
- #15794 Enable @typescript-eslint/no-redundant-type-constituents rule (@JLHwung)
babel-helper-compilation-targets
- #15811 Remove @babel/core peerDep from helper-compilation-targets (@nicolo-ribaudo)
babel-parser
- #15793 Use const enum in babel-parser (@JLHwung)
babel-plugin-transform-runtime, babel-traverse, babel-types
- #15716 chore: Use typescript-eslint@v6 with reworked configs (@JoshuaKGoldberg)

🔬 Output optimization

babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator
- #15746 Reduce transform-block-scoping loops output size (@liuxingbaoyu)

`v7.22.8`

Compare Source

↩️ Revert

babel-core, babel-traverse
- #15754 Revert "Use NodePath#hub as part of the paths cache key" (@nicolo-ribaudo)

`v7.22.7`

Compare Source

🐛 Bug Fix

babel-generator
- #15719 fix: Avoid internally generating negative source maps columns (@liuxingbaoyu)
babel-core, babel-traverse
- #15725 Use NodePath#hub as part of the paths cache key (@nicolo-ribaudo)
Other
- #15747 fix: export meta from eslint-parser/experimental-worker (@JLHwung)

🏠 Internal

babel-core, babel-traverse
- #15702 Refactor visitors merging (@nullableVoidPtr)

`v7.22.6`

Compare Source

🐛 Bug Fix

babel-compat-data, babel-helper-compilation-targets, babel-preset-env
- #15727 Add opera mobile compat data (@JLHwung)
babel-plugin-transform-optional-chaining
- #15739 Fix transform of delete a?.b in function params (@nicolo-ribaudo)
babel-helper-split-export-declaration, babel-plugin-transform-modules-commonjs
- #15736 fix: Default export for duplicate names (@liuxingbaoyu)
babel-compat-data, babel-preset-env
- #15726 update compat-data sources (@JLHwung)
babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3, babel-runtime
- #15705 Fix handling of sync error in @@asyncDispose (@nicolo-ribaudo)
babel-standalone
- #15707 fix: Support transforming Explicit Resource Management in stage-2 (@liuxingbaoyu)
babel-core
- #15626 fix: Works correctly with --frozen-intrinsics (@liuxingbaoyu)

🏠 Internal

babel-helper-create-class-features-plugin, babel-plugin-transform-classes
- #15700 Minor class transform cleanups (@JLHwung)

🔬 Output optimization

babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-transform-class-properties, babel-plugin-transform-optional-chaining, babel-plugin-transform-typescript
- #15740 Compress output for optional chain with multiple ?. (@nicolo-ribaudo)
babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-traverse
- #15741 Inject tmp vars in the params list of IIFEs when possible (@nicolo-ribaudo)

`v7.22.5`

Compare Source

🐛 Bug Fix

babel-preset-env, babel-standalone
- #15675 Fix using syntax-unicode-sets-regex in standalone (@nicolo-ribaudo)

💅 Polish

babel-core
- #15683 Suggest -transform- when resolving missing plugins (@nicolo-ribaudo)

`v7.22.4`

Compare Source

🐛 Bug Fix

babel-traverse
- #15649 Set shorthand: false when renaming an identifier inside an object property (@coderaiser)

🏠 Internal

babel-types
- #15666 Add missing attributes/assertions to VISITOR_KEYS (@nicolo-ribaudo)
babel-parser
- #15667 Mark assert attributes with extra.deprecatedAssertSyntax (@nicolo-ribaudo)

`v7.22.1`

Compare Source

🐛 Bug Fix

babel-helper-validator-identifier
- #15957 Update identifier name definitions to Unicode 15.1 (@JLHwung)
babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
- #15898 Fix transform of named import with shadowed namespace import (@dhlolo)

↩️ Revert

#15965 Revert Node.js 20.6.0 bug workaround (@nicolo-ribaudo)

`v7.22.0`

Compare Source

🚀 New Feature

babel-parser, babel-plugin-transform-typescript
- #15497 [ts] Support import ... = and export = in scripts (@nicolo-ribaudo)
babel-compat-data, babel-core, babel-plugin-proposal-unicode-sets-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-standalone
- #15636 Add unicode-sets-regex transform to preset-env (@JLHwung)
babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-runtime, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
- #15633 Implement transform support for using declarations (@nicolo-ribaudo)
babel-plugin-proposal-import-attributes-to-assertions
- #15620 Create @babel/plugin-proposal-import-attributes-to-assertions (@nicolo-ribaudo)
babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
- #15536 Add support for the updated import attributes proposal (@nicolo-ribaudo)
babel-generator, babel-parser, babel-traverse, babel-types
- #15520 Parse await using declarations (@JLHwung)
babel-core, babel-helper-create-regexp-features-plugin, babel-parser
- #15638 Enable regexp unicode sets parsing by default (@JLHwung)
babel-helpers, babel-plugin-proposal-decorators, babel-plugin-syntax-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #15570 Add decorators version 2023-05 (@nicolo-ribaudo)

💅 Polish

babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-jsx, babel-traverse, babel-types
- #15549 Improve type definitions for validators (@liuxingbaoyu)

🏠 Internal

babel-parser
- #15630 Unify parsing of import/export modifiers (type/typeof/module) (@nicolo-ribaudo)
babel-compat-data, babel-helper-transform-fixture-test-runner, babel-node, babel-plugin-proposal-decorators, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-async-generator-functions, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
- #15531 Allow polyfill providers to specify custom @babel/runtime pkg (@nicolo-ribaudo)
babel-core, babel-plugin-proposal-async-generator-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-decorators, babel-plugin-proposal-dynamic-import, babel-plugin-proposal-export-namespace-from, babel-plugin-proposal-function-sent, babel-plugin-proposal-json-strings, babel-plugin-proposal-logical-assignment-operators, babel-plugin-proposal-nullish-coalescing-operator, babel-plugin-proposal-numeric-separator, babel-plugin-proposal-object-rest-spread, babel-plugin-proposal-optional-catch-binding, babel-plugin-proposal-optional-chaining, babel-plugin-proposal-pipeline-operator, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-plugin-proposal-unicode-property-regex, babel-preset-env, babel-standalone
- #15614 Rename -proposal-s that became standard to -transform- (@nicolo-ribaudo)

`v7.21.5`

Compare Source

👓 Spec Compliance

babel-generator, babel-parser, babel-types
- #15539 fix: Remove mixins and implements for DeclareInterface and InterfaceDeclaration (@liuxingbaoyu)

🐛 Bug Fix

babel-core, babel-generator, babel-plugin-transform-modules-commonjs, babel-plugin-transform-react-jsx
- #15515 fix: ) position with createParenthesizedExpressions (@liuxingbaoyu)
babel-preset-env
- #15580 Add syntax import meta to preset env (@JLHwung)

💅 Polish

babel-types
- #15546 Improve the layout of generated validators (@liuxingbaoyu)
babel-core
- #15535 Use lt instead of lte to check TS version for .cts config (@nicolo-ribaudo)

🏠 Internal

babel-core
- #15575 Use synchronous import.meta.resolve (@nicolo-ribaudo)
babel-helper-fixtures, babel-preset-typescript
- #15568 Handle .overrides and .env when resolving plugins/presets from fixture options (@JLHwung)
babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin
- #15548 Use semver package to compare versions (@nicolo-ribaudo)

`v7.21.4`

Compare Source

🐛 Bug Fix

babel-core, babel-helper-module-imports, babel-preset-typescript
- #15478 Fix support for import/export in .cts files (@liuxingbaoyu)
babel-generator
- #15496 Fix compact printing of non-null assertion operators (@rtsao)

💅 Polish

babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties, babel-plugin-transform-typescript, babel-traverse
- #15427 Fix moving comments of removed nodes (@nicolo-ribaudo)

🏠 Internal

Other
- #15519 Update Prettier integration test (@fisker)
babel-parser
- #15510 refactor: introduce lookaheadInLineCharCode (@JLHwung)
babel-code-frame, babel-highlight
- #15499 Polish babel-code-frame highlight test (@JLHwung)

`v7.21.3`

Compare Source

👓 Spec Compliance

babel-parser
- #15479 disallow mixins/implements in flow interface (@JLHwung)

🐛 Bug Fix

babel-parser
- #15423 [ts] Allow keywords in tuple labels (@Harpica)
babel-plugin-transform-typescript
- #15489 Register var decls generated by import ... = TS transform (@amoeller)
- #15494 fix: Consider export { type foo } as type-only usage (@magic-akari)

💅 Polish

babel-traverse, babel-types
- #15484 Skip node deprecation warnings when used by an old @babel package (@nicolo-ribaudo)
babel-generator
- #15480 chore: Improve jsonCompatibleStrings deprecation (@liuxingbaoyu)

🏠 Internal

#15465 Add ESLint-readable package name (@nzakas)

🔬 Output optimization

babel-plugin-transform-typescript, babel-preset-typescript
- #15467 Optimize TS enums output (@liuxingbaoyu)

`v7.21.2`

Compare Source

👓 Spec Compliance

babel-parser
- #15439 fix: Throws on new foo?.bar!() (@liuxingbaoyu)

💅 Polish

babel-traverse, babel-types
- #15448 Reduce warnings for deprecated node aliases (@nicolo-ribaudo)

🏠 Internal

babel-types
- #15451 Update babel-types docs generator (@JLHwung)

🔬 Output optimization

babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
- #15449 Avoid unnecessary code for unused lazy imports (@nicolo-ribaudo)

`v7.21.0`

Compare Source

🚀 New Feature

babel-core, babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object
- #15435 feat: Implement privateFieldsAsSymbols assumption for classes (@fwienber)
babel-helper-create-regexp-features-plugin, babel-plugin-proposal-regexp-modifiers, babel-standalone
- #15226 feat: Support regexp modifiers proposal (@liuxingbaoyu)
babel-cli, babel-core, babel-generator, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-plugin-transform-react-jsx, babel-traverse
- #15022 feat: Generate sourcemaps of friendly call frames (@liuxingbaoyu)
babel-parser, babel-types
- #15384 [ts] Support const modifier in type parameters (@nicolo-ribaudo)
babel-generator, babel-helpers, babel-parser, babel-plugin-proposal-decorators, babel-plugin-syntax-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #15405 Implement decorators as presented at 2023-01 TC39 meeting (@nicolo-ribaudo)
babel-parser
- #15114 Parser option to allow new.target outside functions (@overlookmotel)
- #15320 Add annexb: false parser option to disable Annex B (@nicolo-ribaudo)
babel-core
- #15283 feat: Support .cts as configuration file (@liuxingbaoyu)
babel-generator, babel-parser, babel-plugin-transform-typescript
- #15381 [ts] Support export type * from (@nicolo-ribaudo)

🐛 Bug Fix

babel-plugin-transform-typescript
- #15379 [ts5.0] Better inlining of constants in enums (@liuxingbaoyu)
babel-core
- #15366 handling circular/shared structures in deep-clone (@azizghuloum)
babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-private-methods, babel-plugin-transform-classes, babel-plugin-transform-new-target
- #15406 Preserve class elements comments in class transform (@JLHwung)
babel-parser, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-types
- #15414 [ts] Fix restrictions for optional parameters (@nicolo-ribaudo)

💅 Polish

babel-parser
- #15400 polish: improve "await as identifier" error in modules (@JLHwung)

🏠 Internal

babel-core
- #15137 Improve CJS compat with ESM-based @babel/core (@nicolo-ribaudo)

🔬 Output optimization

babel-plugin-transform-typescript
- #15418 [ts] Handle exponentiation operator in constant folding (@ehoogeveen-medweb)

`v7.20.13`

Compare Source

🐛 Bug Fix

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #15332 Ensure class decorators can access decorated non-static members (@JLHwung)
babel-plugin-transform-typescript
- #15349 fix: Preserve import {type T} from 'x' when onlyRemoveTypeImports:true (@liuxingbaoyu)
- #15344 fix: Properties that are abstract should not be initialized. (@liuxingbaoyu)
babel-parser
- #15338 Allow negative number in ambient const initializer (@JLHwung)

↩️ Revert

babel-plugin-transform-react-inline-elements, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
- #15355 Reverts "Re-use common JSX element transform for <>...</>" (@JLHwung)

`v7.20.12`

Compare Source

🐛 Bug Fix

babel-traverse
- #15224 Fix TaggedTemplateLiteral evaluation (@nmn)
babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties
- #15312 fix: delete this in static class properties initialization (@SuperSodaSea)

💅 Polish

babel-traverse
- #15313 Implement support for evaluating computed properties. (@JBYoshi)

`v7.20.10`

Compare Source

🐛 Bug Fix

babel-traverse
- #15305 fix: guessExecutionStatusRelativeTo exception (@liuxingbaoyu)

`v7.20.8`

Compare Source

🐛 Bug Fix

babel-plugin-transform-block-scoping
- #15301 fix: transform-block-scoping accesses properties of null (@liuxingbaoyu)
babel-plugin-proposal-class-properties, babel-traverse
- #15294 Properly transpile exported classes that shadowed builtins (@JLHwung)

`v7.20.7`

Compare Source

👓 Spec Compliance

babel-helper-member-expression-to-functions, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes
- #15223 fix: Deleting super property should throw (@SuperSodaSea)
babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes, babel-plugin-transform-object-super
- #15241 fix: Throw correct error types from sed ant class TDZ helpers (@SuperSodaSea)

🐛 Bug Fix

babel-parser, babel-plugin-transform-typescript
- #15209 fix: Support auto accessors with TypeScript annotations (@liuxingbaoyu)
babel-traverse
- #15287 Fix .parentPath after rename in SwitchCase (@nicolo-ribaudo)
babel-plugin-transform-typescript, babel-traverse
- #15284 fix: Ts import type and func with duplicate name (@liuxingbaoyu)
babel-plugin-transform-block-scoping
- #15278 Fix tdz analysis for reassigned captured for bindings (@nicolo-ribaudo)
babel-plugin-proposal-async-generator-functions, babel-preset-env
- #15235 fix: Transform for await with shadowed variables (@liuxingbaoyu)
babel-generator, babel-plugin-proposal-optional-chaining
- #15258 fix: Correctly generate (a ?? b) as T (@liuxingbaoyu)
babel-plugin-transform-react-jsx, babel-types
- #15233 fix: Emit correct sourcemap ranges for JSXText (@liuxingbaoyu)
babel-core, babel-helpers, babel-plugin-transform-computed-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #15232 fix: Computed properties should keep original definition order (@SuperSodaSea)
babel-helper-member-expression-to-functions, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes
- #15223 fix: Deleting super property should throw (@SuperSodaSea)
babel-generator
- #15216 fix: Print newlines for leading Comments of TSEnumMember (@liuxingbaoyu)

💅 Polish

babel-plugin-transform-block-scoping, babel-traverse
- #15275 Improve relative execution tracking in fn exprs (@nicolo-ribaudo)

🏠 Internal

babel-helper-define-map, babel-plugin-transform-property-mutators
- #15274 Inline & simplify @babel/helper-define-map (@nicolo-ribaudo)
babel-core, babel-plugin-proposal-class-properties, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-parameters, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-traverse
- #15200 Rewrite transform-block-scoping plugin (@nicolo-ribaudo)

🏃‍♀️ Performance

babel-helper-compilation-targets
- #15228 perf: Speed up getTargets (@liuxingbaoyu)

`v7.20.5`

Compare Source

👓 Spec Compliance

babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-traverse
- #15183 Improve array destructuring spec compliance (@SuperSodaSea)
babel-cli, babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-transform-classes, babel-plugin-transform-runtime, babel-preset-env
- #15182 fix: apply toPropertyKey when defining class members (@JLHwung)
babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-private-property-in-object, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #15133 fix: validate rhs of in when transpiling #p in C (@JLHwung)

🐛 Bug Fix

babel-parser
- #15225 Parse using[foo] as computed member expression (@JLHwung)
- #15207 Export ParseResult type (@davydof)
- #15198 fix: parse import module, ... (@JLHwung)
babel-helper-wrap-function, babel-preset-env, babel-traverse
- #15181 fix: Edge cases for async functions and noNewArrow assumption (@liuxingbaoyu)
babel-plugin-transform-arrow-functions, babel-plugin-transform-parameters, babel-traverse
- #15163 fix: Throw error when compiling super() in arrow functions with default / rest parameters (@SuperSodaSea)
babel-helpers, babel-node, babel-plugin-proposal-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
- #15194 fix: Bump regenerator and add tests (@SuperSodaSea)
babel-helper-create-regexp-features-plugin
- #15192 fix: Update regjsparser for @babel/standalone (@liuxingbaoyu)
babel-parser, babel-types
- #15109 fix: Babel 8 types (@liuxingbaoyu)
babel-generator
- #15143 Don't print inner comments as leading when wrapping in (``) (@nicolo-ribaudo)
babel-plugin-transform-block-scoping, babel-traverse
- #15167 Register switch's discriminant in the outer scope (@nicolo-ribaudo)

💅 Polish

babel-generator
- #15173 Improve generator behavior when comments:false (@liuxingbaoyu)
babel-plugin-transform-block-scoping
- #15164 Only extract IDs for TDZ checks in assign when necessary (@nicolo-ribaudo)

🏠 Internal

babel-core, babel-parser
- #15202 Bump typescript to 4.9.3 (@JLHwung)

`v7.20.1`

Compare Source

👓 Spec Compliance

babel-parser
- #15391 Disallow await as bound name in using declaration (@JLHwung)
babel-generator, babel-parser, babel-plugin-proposal-export-namespace-from
- #15385 Disallows specifiers after export * as ns (@JLHwung)

🐛 Bug Fix

babel-plugin-transform-block-scoping
- #15398 fix: Loop was converted wrong (@liuxingbaoyu)
babel-parser
- #15377 fix: new (foo?.bar)() incorrectly throws exception OptionalChainingNoNew (@liuxingbaoyu)

`v7.20.0`

Compare Source

🚀 New Feature

babel-compat-data, babel-helper-compilation-targets, babel-preset-env
- #14944 Add deno compilation target (@JLHwung)
babel-plugin-syntax-typescript
- #14923 Expose dts option in @babel/plugin-syntax-typescript (@oceandrama)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate bot force-pushed the renovate/npm-@babel/traverse-vulnerability branch 3 times, most recently from b3e869e to bd8cdf2 Compare March 10, 2024 04:28

renovate bot force-pushed the renovate/npm-@babel/traverse-vulnerability branch 6 times, most recently from 6ed51b0 to 58a4392 Compare March 27, 2024 05:12

renovate bot force-pushed the renovate/npm-@babel/traverse-vulnerability branch 6 times, most recently from 88b7cef to 4eb28a3 Compare April 11, 2024 00:46

renovate bot force-pushed the renovate/npm-@babel/traverse-vulnerability branch from 4eb28a3 to cc58c1d Compare May 4, 2024 14:51

longlho force-pushed the main branch from fc1934c to b0a6d34 Compare May 4, 2024 14:55

renovate bot force-pushed the renovate/npm-@babel/traverse-vulnerability branch 9 times, most recently from 02a3c28 to 3fcf7f4 Compare May 8, 2024 01:25

fix(deps): update dependency @babel/traverse to v7.23.2 [security]

d67bdc0

renovate bot force-pushed the renovate/npm-@babel/traverse-vulnerability branch from 3fcf7f4 to d67bdc0 Compare May 15, 2024 13:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update dependency @babel/traverse to v7.23.2 [security] #4361

fix(deps): update dependency @babel/traverse to v7.23.2 [security] #4361

renovate bot commented Feb 25, 2024

fix(deps): update dependency @babel/traverse to v7.23.2 [security] #4361

Are you sure you want to change the base?

fix(deps): update dependency @babel/traverse to v7.23.2 [security] #4361

Conversation

renovate bot commented Feb 25, 2024

GitHub Vulnerability Alerts

Impact

Patches

Workarounds

Release Notes

🐛 Bug Fix

🚀 New Feature

🐛 Bug Fix

💅 Polish

🔬 Output optimization

🏠 Internal

↩️ Revert

v7.22.19 (2023-09-14)

🐛 Bug Fix

↩️ Revert

🐛 Bug Fix

🔬 Output optimization

🐛 Bug Fix

🏠 Internal

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

↩️ Revert

🐛 Bug Fix

🏠 Internal

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

🐛 Bug Fix

💅 Polish

🐛 Bug Fix

🏠 Internal

🐛 Bug Fix

↩️ Revert

🚀 New Feature

💅 Polish

🏠 Internal

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🐛 Bug Fix

💅 Polish

🏠 Internal

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

👓 Spec Compliance

💅 Polish

🏠 Internal

🔬 Output optimization

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

🐛 Bug Fix

↩️ Revert

🐛 Bug Fix

💅 Polish

🐛 Bug Fix

🐛 Bug Fix

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

👓 Spec Compliance

🐛 Bug Fix