Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: , , ava, babel-loader, c8, eslint, eslint-plugin-jsdoc, eslint-plugin-n, eslint-plugin-regexp, eslint-plugin-unicorn, globby, markdown-it, markdown-it-for-inline, markdown-it-sub, markdown-it-sup, markdownlint-micromark, markdownlint-rule-helpers, strip-json-comments, terser-webpack-plugin, typescript, webpack, webpack-cli, yaml #34

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade: , , ava, babel-loader, c8, eslint, eslint-plugin-jsdoc, eslint-plugin-n, eslint-plugin-regexp, eslint-plugin-unicorn, globby, markdown-it, markdown-it-for-inline, markdown-it-sub, markdown-it-sup, markdownlint-micromark, markdownlint-rule-helpers, strip-json-comments, terser-webpack-plugin, typescript, webpack, webpack-cli, yaml #34

wants to merge 1 commit into from

Conversation

WontonSam
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Name Versions Released on

@babel/core
from 7.22.1 to 7.25.2 | 29 versions ahead of your current version | 2 months ago
on 2024-07-30
@babel/preset-env
from 7.22.4 to 7.25.4 | 27 versions ahead of your current version | a month ago
on 2024-08-22
ava
from 5.3.0 to 6.1.3 | 7 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
on 2024-05-05
babel-loader
from 9.1.2 to 9.1.3 | 1 version ahead of your current version | a year ago
on 2023-07-07
c8
from 7.14.0 to 10.1.2 | 8 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
on 2024-06-13
eslint
from 8.45.0 to 9.9.1 | 32 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
on 2024-08-23
eslint-plugin-jsdoc
from 46.1.0 to 50.2.2 | 79 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
on 2024-08-14
eslint-plugin-n
from 16.0.0 to 17.10.2 | 37 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
on 2024-08-05
eslint-plugin-regexp
from 1.15.0 to 2.6.0 | 25 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
on 2024-05-21
eslint-plugin-unicorn
from 47.0.0 to 55.0.0 | 11 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
on 2024-07-24
globby
from 13.1.4 to 14.0.2 | 6 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
on 2024-06-30
markdown-it
from 13.0.1 to 14.1.0 | 3 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 6 months ago
on 2024-03-18
markdown-it-for-inline
from 0.1.1 to 2.0.1 | 2 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
on 2023-12-05
markdown-it-sub
from 1.0.0 to 2.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
on 2023-12-05
markdown-it-sup
from 1.0.0 to 2.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
on 2023-12-05
markdownlint-micromark
from 0.1.5 to 0.1.10 | 5 versions ahead of your current version | 6 months ago
on 2024-03-28
markdownlint-rule-helpers
from 0.19.0 to 0.25.0 | 6 versions ahead of your current version | 6 months ago
on 2024-03-21
strip-json-comments
from 5.0.0 to 5.0.1 | 1 version ahead of your current version | a year ago
on 2023-07-04
terser-webpack-plugin
from 5.3.9 to 5.3.10 | 1 version ahead of your current version | 9 months ago
on 2023-12-28
typescript
from 5.1.3 to 5.5.4 | 401 versions ahead of your current version | 2 months ago
on 2024-07-22
webpack
from 5.85.0 to 5.94.0 | 16 versions ahead of your current version | a month ago
on 2024-08-22
webpack-cli
from 5.1.1 to 5.1.4 | 3 versions ahead of your current version | a year ago
on 2023-06-07
yaml
from 2.3.1 to 2.5.0 | 10 versions ahead of your current version | 2 months ago
on 2024-07-24

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Infinite loop
SNYK-JS-MARKDOWNIT-6483324		 227 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-WEBPACK-7840298		 227 Proof of Concept
Release notes
Package name: @babel/core
  • 7.25.2 - 2024-07-30

    v7.25.2 (2024-07-30)

    🐛 Bug Fix

    • babel-core, babel-traverse

    Committers: 2

  • 7.24.9 - 2024-07-15

    v7.24.9 (2024-07-15)

    🐛 Bug Fix

    💅 Polish

    • babel-generator, babel-plugin-transform-optional-chaining

    🏠 Internal

    • babel-helper-module-transforms

    Committers: 5

  • 7.24.8 - 2024-07-11
  • 7.24.7 - 2024-06-05
  • 7.24.6 - 2024-05-24
  • 7.24.5 - 2024-04-29
  • 7.24.4 - 2024-04-03
  • 7.24.3 - 2024-03-20
  • 7.24.1 - 2024-03-19
  • 7.24.0 - 2024-02-28
  • 7.23.9 - 2024-01-25
  • 7.23.7 - 2023-12-29
  • 7.23.6 - 2023-12-11
  • 7.23.5 - 2023-11-29
  • 7.23.3 - 2023-11-09
  • 7.23.2 - 2023-10-12
  • 7.23.0 - 2023-09-25
  • 7.22.20 - 2023-09-16
  • 7.22.19 - 2023-09-14
  • 7.22.18 - 2023-09-14
  • 7.22.17 - 2023-09-08
  • 7.22.15 - 2023-09-04
  • 7.22.11 - 2023-08-24
  • 7.22.10 - 2023-08-07
  • 7.22.9 - 2023-07-12
  • 7.22.8 - 2023-07-06
  • 7.22.7 - 2023-07-06
  • 7.22.6 - 2023-07-04
  • 7.22.5 - 2023-06-08
  • 7.22.1 - 2023-05-26
from @babel/core GitHub release notes
Package name: @babel/preset-env
  • 7.25.4 - 2024-08-22

    v7.25.4 (2024-08-22)

    🐛 Bug Fix

    💅 Polish

    • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
    • babel-generator, babel-plugin-transform-class-properties
    • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread

    🔬 Output optimization

    Committers: 4

  • 7.25.3 - 2024-07-31

    v7.25.3 (2024-07-31)

    🐛 Bug Fix

    • babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse

    🏠 Internal

    Committers: 2

  • 7.25.2 - 2024-07-30

    v7.25.2 (2024-07-30)

    🐛 Bug Fix

    • babel-core, babel-traverse

    Committers: 2

  • 7.25.0 - 2024-07-26

    v7.25.0 (2024-07-26)

    Thanks @ davidtaylorhq and @ slatereax for your first PR!

    You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

    👓 Spec Compliance

    • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
    • babel-plugin-transform-typescript
      • #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@ liuxingbaoyu)

    🚀 New Feature

    • babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
    • babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
    • babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
    • babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
    • babel-core, babel-parser
    • babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
    • babel-plugin-transform-block-scoping, babel-traverse, babel-types
    • babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules
    • babel-helper-transform-fixture-test-runner, babel-node
    • babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone
      • #16445 Add duplicate-named-capturing-groups-regex to preset-env (@ JLHwung)

    🐛 Bug Fix

    🏠 Internal

    • Other
    • babel-generator
    • babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse

    🏃‍♀️ Performance

    • babel-parser, babel-plugin-proposal-pipeline-operator

    🔬 Output optimization

    • babel-plugin-transform-classes
    • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-object-super, babel-plugin-transform-private-methods, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
    • babel-plugin-transform-class-properties, babel-plugin-transform-classes

    Committers: 6

  • 7.24.8 - 2024-07-11
  • 7.24.7 - 2024-06-05
  • 7.24.6 - 2024-05-24
  • 7.24.5 - 2024-04-29
  • 7.24.4 - 2024-04-03
  • 7.24.3 - 2024-03-20
  • 7.24.1 - 2024-03-19
  • 7.24.0 - 2024-02-28
  • 7.23.9 - 2024-01-25
  • 7.23.8 - 2024-01-08
  • 7.23.7 - 2023-12-29
  • 7.23.6 - 2023-12-11
  • 7.23.5 - 2023-11-29
  • 7.23.3 - 2023-11-09
  • 7.23.2 - 2023-10-11
  • 7.22.20 - 2023-09-16
  • 7.22.15 - 2023-09-04
  • 7.22.14 - 2023-08-30
  • 7.22.10 - 2023-08-07
  • 7.22.9 - 2023-07-12
  • 7.22.7 - 2023-07-06
  • 7.22.6 - 2023-07-04
  • 7.22.5 - 2023-06-08
  • 7.22.4 - 2023-05-29
from @babel/preset-env GitHub release notes
Package name: ava
  • 6.1.3 - 2024-05-05

    What's Changed

    New Contributors

    Full Changelog: v6.1.2...v6.1.3

  • 6.1.2 - 2024-02-28

    What's Changed

    • Fix throws assertions rejecting falsy values when any: true by @ gibson042 in #3313

    Full Changelog: v6.1.1...v6.1.2

  • 6.1.1 - 2024-01-29

    What's Changed

    Full Changelog: v6.1.0...v6.1.1

  • 6.1.0 - 2024-01-21

    What's Changed

    • Implement registerCompletionHandler() by @ novemberborn in #3283

      AVA 6 expects test code to clean up gracefully when the tests are complete, allowing the test environment (worker thread or child process) to exit. If this does not happen, AVA will report a timeout. You can use registerCompletionHandler() to perform any other clean up (or indeed exit the process) after AVA has completed the test execution. See the description here.

    • Fix potential bug with watch mode when no failed test files are written by @ novemberborn in #3287

    • Fix ava/internal ESM type module by @ codetheweb in #3292

    Full Changelog: v6.0.1...v6.1.0

  • 6.0.1 - 2023-12-06

    What's Changed

    Full Changelog: v6.0.0...v6.0.1

  • 6.0.0 - 2023-12-04

    Breaking Changes

    • AVA now requires Node.js versions 18.18, 20.8 or 21. Versions 14 and 16 are no longer supported. #3251 #3216

    • When tests finish, worker threads or child processes are no longer exited through proces.exit(). If your test file does not exit on its own, the test run will time out. #3260

    • Changes to watch mode #3218:

      • Watch mode can no longer be started via the ava.config.* or package.json configuration.
      • The ignoredByWatcher configuration has moved to the watchMode object, under the ignoreChanges key.
      • Watch mode now uses the built-in fs.watch() in recursive mode. This is supported on Linux in Node.js 20 or newer, and MacOS and Windows in Node.js 18 as well. There are caveats to keep in mind.

    • Failed assertions now throw, meaning that any subsequent code is not executed. This also impacts the type definitions. #3246

    • Only native errors are now considered errors by the t.throws() and t.throwsAsync() assertions. Object.create(Error.prototype) is not a native error. #3229

    • Changes to modules loaded through the require configuration #3184:

      • If such modules export a default function, this function is now invoked.
      • Local files are loaded through @ ava/typescript if necessary.

    Improvements

    Rewritten watcher

    The watcher has been rewritten. It’s now built on fs.watch() in recursive mode.

    @ vercel/nft is used to perform static dependency analysis, supporting ESM and CJS imports for JavaScript & TypeScript source files. This is a huge improvement over the previous runtime tracking of CJS imports, which did not support ESM.

    Integration with @ ava/typescript has been improved. The watcher can now detect a change to a TypeScript source file, then wait for the corresponding build output to change before re-running tests.

    The ignoredByWatcher configuration has moved to the watchMode object, under the ignoreChanges key.

    See #3218 and #3257.

    Failed assertions now throw

    Assertions now throw a TestFailure error when they fail. This error is not exported or documented and should not be used or thrown manually. You cannot catch this error in order to recover from a failure, use t.try() instead.

    All assertions except for t.throws() and t.throwsAsync() now return true when they pass. This is useful for some of the assertions in TypeScript where they can be used as a type guard.

    Committing a failed t.try() result now also throws.

    See #3246.

    t.throws() and t.throwsAsync() can now expect any error

    By default, the thrown error (or rejection reason) must be a native error. You can change the assertion to expect any kind of error by setting any: true in the expectation object:

    t.throws(() => { throw 'error' }, {any: true})

    See #3245 by @ adiSuper94.

    The require configuration is now more powerful

    It now loads ES modules.

    Local files are loaded through @ ava/typescript if necessary, so you can also write these in TypeScript.

    If there is a default export function, it is invoked after loading. The function is awaited so it can do asynchronous setup before further modules are loaded. Arguments from the configuration can be passed to the function (as a [structured clone](https://developer.mozilla.org/en-US/docs/Web/API/structuredClone)).

    See #3184 by @ sculpt0r.

    Other changes worth noting

    • Internal events can now be observed (experimentally). See #3247 by @ codetheweb. It’s experimental and undocumented.
    • You can now use t.timeout.clear() to restore a previous t.timeout(). #3221
    • Code coverage is flushed to disk at opportune moments. #3220

    New Contributors

    Full Changelog: v5.3.1...v6.0.0

  • 5.3.1 - 2023-06-16

    What's Changed

    Full Changelog: v5.3.0...v5.3.1

  • 5.3.0 - 2023-05-25

    What's Changed

    New Contributors

    Full Changelog: v5.2.0...v5.3.0

from ava GitHub release notes
Package name: babel-loader

@snyk-bot
feat: upgrade multiple dependencies with Snyk
01227e1 
Snyk has created this PR to upgrade:
  - @babel/core from 7.22.1 to 7.25.2.
    See this package in npm: https://www.npmjs.com/package/@babel/core
  - @babel/preset-env from 7.22.4 to 7.25.4.
    See this package in npm: https://www.npmjs.com/package/@babel/preset-env
  - ava from 5.3.0 to 6.1.3.
    See this package in npm: https://www.npmjs.com/package/ava
  - babel-loader from 9.1.2 to 9.1.3.
    See this package in npm: https://www.npmjs.com/package/babel-loader
  - c8 from 7.14.0 to 10.1.2.
    See this package in npm: https://www.npmjs.com/package/c8
  - eslint from 8.45.0 to 9.9.1.
    See this package in npm: https://www.npmjs.com/package/eslint
  - eslint-plugin-jsdoc from 46.1.0 to 50.2.2.
    See this package in npm: https://www.npmjs.com/package/eslint-plugin-jsdoc
  - eslint-plugin-n from 16.0.0 to 17.10.2.
    See this package in npm: https://www.npmjs.com/package/eslint-plugin-n
  - eslint-plugin-regexp from 1.15.0 to 2.6.0.
    See this package in npm: https://www.npmjs.com/package/eslint-plugin-regexp
  - eslint-plugin-unicorn from 47.0.0 to 55.0.0.
    See this package in npm: https://www.npmjs.com/package/eslint-plugin-unicorn
  - globby from 13.1.4 to 14.0.2.
    See this package in npm: https://www.npmjs.com/package/globby
  - markdown-it from 13.0.1 to 14.1.0.
    See this package in npm: https://www.npmjs.com/package/markdown-it
  - markdown-it-for-inline from 0.1.1 to 2.0.1.
    See this package in npm: https://www.npmjs.com/package/markdown-it-for-inline
  - markdown-it-sub from 1.0.0 to 2.0.0.
    See this package in npm: https://www.npmjs.com/package/markdown-it-sub
  - markdown-it-sup from 1.0.0 to 2.0.0.
    See this package in npm: https://www.npmjs.com/package/markdown-it-sup
  - markdownlint-micromark from 0.1.5 to 0.1.10.
    See this package in npm: https://www.npmjs.com/package/markdownlint-micromark
  - markdownlint-rule-helpers from 0.19.0 to 0.25.0.
    See this package in npm: https://www.npmjs.com/package/markdownlint-rule-helpers
  - strip-json-comments from 5.0.0 to 5.0.1.
    See this package in npm: https://www.npmjs.com/package/strip-json-comments
  - terser-webpack-plugin from 5.3.9 to 5.3.10.
    See this package in npm: https://www.npmjs.com/package/terser-webpack-plugin
  - typescript from 5.1.3 to 5.5.4.
    See this package in npm: https://www.npmjs.com/package/typescript
  - webpack from 5.85.0 to 5.94.0.
    See this package in npm: https://www.npmjs.com/package/webpack
  - webpack-cli from 5.1.1 to 5.1.4.
    See this package in npm: https://www.npmjs.com/package/webpack-cli
  - yaml from 2.3.1 to 2.5.0.
    See this package in npm: https://www.npmjs.com/package/yaml

See this project in Snyk:
https://app.snyk.io/org/cachiman/project/14fb146e-7d9c-4fae-9564-bc36f1da8ba1?utm_source=github&utm_medium=referral&page=upgrade-pr
@google-cla Google CLA
Copy link

google-cla bot commented Sep 19, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@WontonSam @snyk-bot