[Snyk] Upgrade: @babel/core, @babel/preset-env

[snyk-bot]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/core from 7.12.17 to 7.14.6	13 versions ahead of your current version	a month ago on 2021-06-14
@babel/preset-env from 7.12.17 to 7.14.7	13 versions ahead of your current version	a month ago on 2021-06-21

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

• 7.14.6 - 2021-06-14
  

  v7.14.6 (2021-06-14)

  🐛 Bug Fix

  • babel-plugin-transform-spread
    • #13459 babel-plugin-transform-spread add missing argument in build calls (@ zxbodya)
    • #13439 Correctly transform spreads of arrays with holes (@ nicolo-ribaudo)
  • babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs
    • #13444 fix destructuring of empty string (@ lala7573)
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties
    • #13429 fix: reference to class expression in private method (@ lala7573)
  • babel-parser
    • #13428 [ts] Support override modifiers for parameter properties (@ sosukesuzuki)
    • #13449 Disallow JSX tag forming after TS non-null assertion (@ JLHwung)

  🏠 Internal

  • #13423 Faster babel build (@ JLHwung)

  🏃‍♀️ Performance

  • babel-parser
    • #13453 Faster readRegexp (@ JLHwung)

  Committers: 5

  • Bogdan Savluk (@ zxbodya)
  • Huáng Jùnliàng (@ JLHwung)
  • Lively (@ lala7573)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Sosuke Suzuki (@ sosukesuzuki)
• 7.14.5 - 2021-06-09
  

  v7.14.5 (2021-06-09)

  Thanks @ Eyoatam, @ lightmare, @ ota-meshi, and @ tony-go for your first PRs!

  👓 Spec Compliance

  • babel-plugin-proposal-do-expressions, babel-traverse
    • #13122 fix: hoist variable declaration within do block (@ JLHwung)
  • babel-parser
    • #13409 Relax import assertion key-is-type constraint (@ JLHwung)

  🐛 Bug Fix

  • babel-parser
    • #13418 fix(parser): correctly parse record and tuple tokens (@ fedeci)
    • #13410 fix: throw when async() call param is object with assignement (@ tony-go)
    • #13396 Add support for d flag of regex literals in parser (@ ota-meshi)
  • babel-helpers
    • #13404 fix generate-helpers failing in URL-encoded path (@ lightmare)

  🏠 Internal

  • babel-helper-hoist-variables
    • #13442 Disallow dependency cycles (@ nicolo-ribaudo)
  • babel-parser
    • #13440 update test fixtures (@ JLHwung)
    • #13431 Reduce exprAllowed usage (@ JLHwung)
    • #13422 fix(@ babel/parser): fix tokenizer context update code (@ Eyoatam)
  • Other
    • #13420 chore: specify @ babel/eslint-parser deps (@ JLHwung)
  • Every package
    • #13363 chore: setup Yarn constraints (@ merceyz)

  🏃‍♀️ Performance

  • babel-parser
    • #13408 Use set in parser scope (@ JLHwung)
    • #13386 Faster checkReservedWord (@ JLHwung)
    • #13406 Back parser state exportedIdentifiers by set (@ JLHwung)

  Committers: 9

  • Daniel Tschinder (@ danez)
  • Eyoatam Tamirat (@ Eyoatam)
  • Federico Ciardi (@ fedeci)
  • Huáng Jùnliàng (@ JLHwung)
  • Kristoffer K. (@ merceyz)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Tony Gorez (@ tony-go)
  • Yosuke Ota (@ ota-meshi)
  • @ lightmare
• 7.14.3 - 2021-05-17
  

  v7.14.3 (2021-05-17)

  🐛 Bug Fix

  • babel-core
    • #13321 Pass assumptions set in presets to plugins (@ nicolo-ribaudo)
  • babel-parser
    • #13326 fix: preserve tokensLength in tryParse (@ JLHwung)
    • #13325 Parse let declarations whose id starts with \ (@ nicolo-ribaudo)
  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block
    • #13303 Don't duplicate the base class when using constantSuper (@ nicolo-ribaudo)

  🏠 Internal

  • Other
    • #13313 chore: add class-static-block test262 mapping (@ JLHwung)
  • babel-plugin-transform-block-scoping
    • #13304 Add test for fixed block scoping issue (@ nicolo-ribaudo)

  🔬 Output optimization

  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-static-block, babel-preset-env
    • #13297 Compile static blocks without the intermediate priv field step (@ nicolo-ribaudo)

  Committers: 4

  • Babel Bot (@ babel-bot)
  • Bogdan Savluk (@ zxbodya)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
• 7.14.2 - 2021-05-12
  

  v7.14.2 (2021-05-12)

  Thanks @ liuyenwei, @ quickgiant, @ serut, and @ trinangkur for your first PRs!

  🐛 Bug Fix

  • babel-node
    • #13295 Fix: Only create @ babel/node IPC channel when needed (@ quickgiant)
  • babel-parser
    • #13284 Parse attributes of import expression with estree plugin (@ sosukesuzuki)
    • #13261 Fix invalid identifier name on unfinished escape (@ JLHwung)
  • babel-types
    • #13275 Support objects from other contexts in t.valueToNode (@ nicolo-ribaudo)
  • Other
    • #13274 [eslint] Don't crash on multiple @ babel/parser copies (@ nicolo-ribaudo)
  • babel-generator
    • #13269 Print parentheses around identifier let where necessary (@ Zalathar)

  💅 Polish

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
    • #13296 Better error for export * as ns without the correct plugin (@ JLHwung)

  📝 Documentation

  • #13253 [DOC] Add missing Monorepo configuration (@ serut)

  🏠 Internal

  • Other
    • #13289 Update lodash version for fixing security vulnerability (@ trinangkur)
  • babel-types
    • #13264 [babel-types] Update matchesPattern to account for this (@ liuyenwei)

  🏃‍♀️ Performance

  • babel-parser
    • #13262 Faster identifier tokenizing (@ JLHwung)
    • #13256 Refactor private name tokenizing (@ JLHwung)

  Committers: 9

  • Babel Bot (@ babel-bot)
  • Clark Jacobsohn (@ quickgiant)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Sosuke Suzuki (@ sosukesuzuki)
  • Stuart Cook (@ Zalathar)
  • Trinangkur Chatterjee (@ trinangkur)
  • Yen-Wei Liu (@ liuyenwei)
  • @ serut
• 7.14.0 - 2021-04-29
  Read more
• 7.13.16 - 2021-04-20
  Read more
• 7.13.15 - 2021-04-08
• 7.13.14 - 2021-03-29
• 7.13.13 - 2021-03-26
• 7.13.10 - 2021-03-08
• 7.13.8 - 2021-02-26
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18

from @babel/core GitHub release notes

Package name: @babel/preset-env

• 7.14.7 - 2021-06-21
  

  v7.14.7 (2021-06-21)

  Thanks @ hyaocuk and @ plourenco for your first PRs!

  🐛 Bug Fix

  • babel-plugin-proposal-object-rest-spread
    • #13483 Don't hoist template literal keys in object-rest-spread (@ lala7573)
  • babel-plugin-transform-destructuring
    • #13482 Don't hoist template strings from destructuring keys (@ lala7573)
  • babel-traverse
    • #13475 fix: remove traverse trap on NODE_ENV == "test" (@ JLHwung)
  • Other
    • #13477 Add record and tuple tokens to eslint parser (@ plourenco)
  • babel-helper-member-expression-to-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-private-methods
    • #13395 fix: tagged template incorrect receiver (@ sag1v)

  🏠 Internal

  • babel-parser
    • #13450 Simplify token context (@ JLHwung)
    • #13419 refactor(parser): remove refNeedsArrowPos (@ tony-go)
  • Other
    • #13485 chore: fix comment typo (@ hyaocuk)

  Committers: 8

  • Federico Ciardi (@ fedeci)
  • Huáng Jùnliàng (@ JLHwung)
  • Lively (@ lala7573)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Pedro Lourenço (@ plourenco)
  • Sagiv ben giat (@ sag1v)
  • Terence Ng (@ hyaocuk)
  • Tony Gorez (@ tony-go)
• 7.14.5 - 2021-06-09
  Read more
• 7.14.4 - 2021-05-28
  Read more
• 7.14.2 - 2021-05-12
  Read more
• 7.14.1 - 2021-05-04
  Read more
• 7.14.0 - 2021-04-29
  Read more
• 7.13.15 - 2021-04-08
• 7.13.12 - 2021-03-22
• 7.13.10 - 2021-03-08
• 7.13.9 - 2021-03-01
• 7.13.8 - 2021-02-26
• 7.13.5 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18

from @babel/preset-env GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[github-actions]

This pull request is stale because it has been open 30 days with no activity.