[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env

[NicolasOmar]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/core from 7.23.0 to 7.23.2	1 version ahead of your current version	23 days ago on 2023-10-12
@babel/plugin-transform-runtime from 7.22.15 to 7.23.2	1 version ahead of your current version	23 days ago on 2023-10-11
@babel/preset-env from 7.22.20 to 7.23.2	1 version ahead of your current version	23 days ago on 2023-10-11

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	536/1000 Why? Recently disclosed, CVSS 9.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

• 7.23.2 - 2023-10-12
  

  v@babel/[email protected]

• 7.23.0 - 2023-09-25
  

  v7.23.0 (2023-09-25)

  Thanks @ lorenzoferre and @ RajShukla1 for your first PRs!

  🚀 New Feature

  • babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import
    • #15870 Support transforming import source for wasm (@ nicolo-ribaudo)
  • babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
    • #15878 Implement import defer proposal transform support (@ nicolo-ribaudo)
  • babel-generator, babel-parser, babel-types
    • #15845 Implement import defer parsing support (@ nicolo-ribaudo)
    • #15829 Add parsing support for the "source phase imports" proposal (@ nicolo-ribaudo)
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types
    • #15682 Add createImportExpressions parser option (@ JLHwung)
  • babel-standalone
    • #15671 Pass through nonce to the transformed script element (@ JLHwung)
  • babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types
    • #15751 Add support for optional chain in assignments (@ nicolo-ribaudo)
  • babel-helpers, babel-plugin-proposal-decorators
    • #15895 Implement the "decorator metadata" proposal (@ nicolo-ribaudo)
  • babel-traverse, babel-types
    • #15893 Add t.buildUndefinedNode (@ liuxingbaoyu)
  • babel-preset-typescript
    • #15913 Add rewriteImportExtensions option to TS preset (@ nicolo-ribaudo)
  • babel-parser
    • #15896 Allow TS tuples to have both labeled and unlabeled elements (@ yukukotani)

  🐛 Bug Fix

  • babel-plugin-transform-block-scoping
    • #15962 fix: transform-block-scoping captures the variables of the method in the loop (@ liuxingbaoyu)

  💅 Polish

  • babel-traverse
    • #15797 Expand evaluation of global built-ins in @ babel/traverse (@ lorenzoferre)
  • babel-plugin-proposal-explicit-resource-management
    • #15985 Improve source maps for blocks with using declarations (@ nicolo-ribaudo)

  🔬 Output optimization

  • babel-core, babel-helper-module-transforms, babel-plugin-transform-async-to-generator, babel-plugin-transform-classes, babel-plugin-transform-dynamic-import, babel-plugin-transform-function-name, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-inline-elements, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env
    • #15984 Inline exports.XXX = update in simple variable declarations (@ nicolo-ribaudo)

  Committers: 7

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Lorenzo Ferretti (@ lorenzoferre)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Raj Pawan Shukla (@ RajShukla1)
  • Yuku Kotani (@ yukukotani)
  • @ liuxingbaoyu

from @babel/core GitHub release notes

Package name: @babel/plugin-transform-runtime

• 7.23.2 - 2023-10-11
  

  v@babel/[email protected]

• 7.22.15 - 2023-09-04

from @babel/plugin-transform-runtime GitHub release notes

Package name: @babel/preset-env

• 7.23.2 - 2023-10-11
  

  v@babel/[email protected]

• 7.22.20 - 2023-09-16
  

  v7.22.20 (2023-09-16)

  🏠 Internal

  • babel-helper-validator-identifier
    • #15973 Remove special-casing of U+200C and U+200D (@ nicolo-ribaudo)
  • babel-plugin-transform-dotall-regex
    • #15974 Update Unicode test fixtures (@ JLHwung)

  ↩️ Revert

  • babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
    • #15979 Revert "Improve output when wrapping functions" (@ jjonescz)

  Committers: 3

  • Huáng Jùnliàng (@ JLHwung)
  • Jan Jones (@ jjonescz)
  • Nicolò Ribaudo (@ nicolo-ribaudo)

from @babel/preset-env GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (a4d3523) 81.63% compared to head (4fdbce3) 81.63%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #133   +/-   ##
=======================================
  Coverage   81.63%   81.63%           
=======================================
  Files          10       10           
  Lines         196      196           
  Branches       49       49           
=======================================
  Hits          160      160           
  Misses         36       36           

Flag	Coverage Δ
unittests	81.63% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[NicolasOmar]

Solved in #146