[Snyk] Upgrade: @babel/core, @babel/runtime, @babel/preset-env by snyk-bot · Pull Request #29 · PerionNet/Prebid.js

snyk-bot · 2023-01-26T16:40:33Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/core from 7.19.6 to 7.20.12	4 versions ahead of your current version	22 days ago on 2023-01-04
@babel/runtime from 7.20.1 to 7.20.7	3 versions ahead of your current version	a month ago on 2022-12-22
@babel/preset-env from 7.19.4 to 7.20.2	1 version ahead of your current version	3 months ago on 2022-11-04

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-JSON5-3182856	507/1000 Why? Proof of Concept exploit, High severity	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

7.20.12 - 2023-01-04
v7.20.12 (2023-01-04)

Thanks @ cross19xx, @ JBYoshi and @ nmn for your first PRs!

🐛 Bug Fix
- babel-traverse
  - #15224 Fix TaggedTemplateLiteral evaluation (@ nmn)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties
  - #15312 fix: delete this in static class properties initialization (@ SuperSodaSea)
💅 Polish
- babel-traverse
  - #15313 Implement support for evaluating computed properties. (@ JBYoshi)
Committers: 5
- Jonathan Browne (@ JBYoshi)
- Kenneth Kwakye-Gyamfi (@ cross19xx)
- Naman Goel (@ nmn)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Tianlan Zhou (@ SuperSodaSea)
7.20.7 - 2022-12-22
v7.20.7 (2022-12-22)

Thanks @ wsypower for your first PR!

👓 Spec Compliance
- babel-helper-member-expression-to-functions, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes
  - #15223 fix: Deleting super property should throw (@ SuperSodaSea)
- babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes, babel-plugin-transform-object-super
  - #15241 fix: Throw correct error types from sed ant class TDZ helpers (@ SuperSodaSea)
🐛 Bug Fix
- babel-parser, babel-plugin-transform-typescript
  - #15209 fix: Support auto accessors with TypeScript annotations (@ liuxingbaoyu)
- babel-traverse
  - #15287 Fix .parentPath after rename in SwitchCase (@ nicolo-ribaudo)
- babel-plugin-transform-typescript, babel-traverse
  - #15284 fix: Ts import type and func with duplicate name (@ liuxingbaoyu)
- babel-plugin-transform-block-scoping
  - #15278 Fix tdz analysis for reassigned captured for bindings (@ nicolo-ribaudo)
- babel-plugin-proposal-async-generator-functions, babel-preset-env
  - #15235 fix: Transform for await with shadowed variables (@ liuxingbaoyu)
- babel-generator, babel-plugin-proposal-optional-chaining
  - #15258 fix: Correctly generate (a ?? b) as T (@ liuxingbaoyu)
- babel-plugin-transform-react-jsx, babel-types
  - #15233 fix: Emit correct sourcemap ranges for JSXText (@ liuxingbaoyu)
- babel-core, babel-helpers, babel-plugin-transform-computed-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #15232 fix: Computed properties should keep original definition order (@ SuperSodaSea)
- babel-helper-member-expression-to-functions, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes
  - #15223 fix: Deleting super property should throw (@ SuperSodaSea)
- babel-generator
  - #15216 fix: Print newlines for leading Comments of TSEnumMember (@ liuxingbaoyu)
💅 Polish
- babel-plugin-transform-block-scoping, babel-traverse
  - #15275 Improve relative execution tracking in fn exprs (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-define-map, babel-plugin-transform-property-mutators
  - #15274 Inline & simplify @ babel/helper-define-map (@ nicolo-ribaudo)
- babel-core, babel-plugin-proposal-class-properties, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-parameters, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-traverse
  - #15200 Rewrite transform-block-scoping plugin (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-helper-compilation-targets
  - #15228 perf: Speed up getTargets (@ liuxingbaoyu)
Committers: 6
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Tianlan Zhou (@ SuperSodaSea)
- @ liuxingbaoyu
- 魏 (@ wsypower)
7.20.5 - 2022-11-28
v7.20.5 (2022-11-28)

Thanks @ davydof and @ SuperSodaSea for your first PRs!

👓 Spec Compliance
- babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-traverse
  - #15183 Improve array destructuring spec compliance (@ SuperSodaSea)
- babel-cli, babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-transform-classes, babel-plugin-transform-runtime, babel-preset-env
  - #15182 fix: apply toPropertyKey when defining class members (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-private-property-in-object, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #15133 fix: validate rhs of in when transpiling #p in C (@ JLHwung)
🐛 Bug Fix
- babel-parser
  - #15225 Parse using[foo] as computed member expression (@ JLHwung)
  - #15207 Export ParseResult type (@ davydof)
  - #15198 fix: parse import module, ... (@ JLHwung)
- babel-helper-wrap-function, babel-preset-env, babel-traverse
  - #15181 fix: Edge cases for async functions and noNewArrow assumption (@ liuxingbaoyu)
- babel-plugin-transform-arrow-functions, babel-plugin-transform-parameters, babel-traverse
  - #15163 fix: Throw error when compiling super() in arrow functions with default / rest parameters (@ SuperSodaSea)
- babel-helpers, babel-node, babel-plugin-proposal-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #15194 fix: Bump regenerator and add tests (@ SuperSodaSea)
- babel-helper-create-regexp-features-plugin
  - #15192 fix: Update regjsparser for @ babel/standalone (@ liuxingbaoyu)
- babel-parser, babel-types
  - #15109 fix: Babel 8 types (@ liuxingbaoyu)
- babel-generator
  - #15143 Don't print inner comments as leading when wrapping in (``) (@ nicolo-ribaudo)
- babel-plugin-transform-block-scoping, babel-traverse
  - #15167 Register switch's discriminant in the outer scope (@ nicolo-ribaudo)
💅 Polish
- babel-generator
  - #15173 Improve generator behavior when comments:false (@ liuxingbaoyu)
- babel-plugin-transform-block-scoping
  - #15164 Only extract IDs for TDZ checks in assign when necessary (@ nicolo-ribaudo)
🏠 Internal
- babel-core, babel-parser
  - #15202 Bump typescript to 4.9.3 (@ JLHwung)
Committers: 6
- Alexander Davydov (@ davydof)
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Tianlan Zhou (@ SuperSodaSea)
- @ liuxingbaoyu
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20

from @babel/core GitHub release notes

Package name: @babel/runtime

7.20.7 - 2022-12-22
Read more
7.20.6 - 2022-11-28
v7.20.6 (2022-11-28)

🐛 Bug Fix
- babel-helpers
  - #15231 Update checkInRHS helper min version (@ nicolo-ribaudo)
Committers: 1
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.20.5 - 2022-11-28
Read more
7.20.1 - 2022-11-01

from @babel/runtime GitHub release notes

Package name: @babel/preset-env

7.20.2 - 2022-11-04
7.19.4 - 2022-10-10

from @babel/preset-env GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/core from 7.19.6 to 7.20.12. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/runtime from 7.20.1 to 7.20.7. See this package in npm: https://www.npmjs.com/package/@babel/runtime - @babel/preset-env from 7.19.4 to 7.20.2. See this package in npm: https://www.npmjs.com/package/@babel/preset-env See this project in Snyk: https://app.snyk.io/org/perionnet-pe3/project/d332121f-9a29-4591-a41b-6fb853857d37?utm_source=github&utm_medium=referral&page=upgrade-pr

* add Rise adapter * fixes * change param isOrg to org * Rise adapter * change email for rise * fix circle failed * bump * bump * bump * remove space * Upgrade Rise adapter to 5.0 * added isWrapper param * addes is_wrapper parameter to documentation * added is_wrapper to test * removed isWrapper * Rise Bid Adapter: support Coppa param (#24) * MinuteMedia Bid Adapter: support Coppa param (#25) * Revert "MinuteMedia Bid Adapter: support Coppa param (#25)" (#26) This reverts commit 66c4e7b. * bump * update coppa fetch * setting coppa param update * update Coppa tests * update test naming * Rise Bid Adapter: support plcmt and sua (#27) * update minuteMediaBidAdapter - support missing params (#29) --------- Co-authored-by: Noam Tzuberi <noam.tzuberi@ironsrc.com> Co-authored-by: noamtzu <noamtzu@gmail.com> Co-authored-by: Noam Tzuberi <noamtzu@users.noreply.github.com> Co-authored-by: Laslo Chechur <laslo.chechur@ironsrc.com> Co-authored-by: OronW <41260031+OronW@users.noreply.github.com> Co-authored-by: lasloche <62240785+lasloche@users.noreply.github.com> Co-authored-by: inna <innayare@gmail.com> Co-authored-by: YakirLavi <yakir.lavi@risecodes.com>

* add Rise adapter * fixes * change param isOrg to org * Rise adapter * change email for rise * fix circle failed * bump * bump * bump * remove space * Upgrade Rise adapter to 5.0 * added isWrapper param * addes is_wrapper parameter to documentation * added is_wrapper to test * removed isWrapper * Rise Bid Adapter: support Coppa param (#24) * MinuteMedia Bid Adapter: support Coppa param (#25) * Revert "MinuteMedia Bid Adapter: support Coppa param (#25)" (#26) This reverts commit 66c4e7b. * bump * update coppa fetch * setting coppa param update * update Coppa tests * update test naming * Rise Bid Adapter: support plcmt and sua (#27) * update minuteMediaBidAdapter - support missing params (#29) * RIseBidAdapter: support currency (#35) --------- Co-authored-by: Noam Tzuberi <noam.tzuberi@ironsrc.com> Co-authored-by: noamtzu <noamtzu@gmail.com> Co-authored-by: Noam Tzuberi <noamtzu@users.noreply.github.com> Co-authored-by: Laslo Chechur <laslo.chechur@ironsrc.com> Co-authored-by: OronW <41260031+OronW@users.noreply.github.com> Co-authored-by: lasloche <62240785+lasloche@users.noreply.github.com> Co-authored-by: inna <innayare@gmail.com> Co-authored-by: YakirLavi <yakir.lavi@risecodes.com>

* add Rise adapter * fixes * change param isOrg to org * Rise adapter * change email for rise * fix circle failed * bump * bump * bump * remove space * Upgrade Rise adapter to 5.0 * added isWrapper param * addes is_wrapper parameter to documentation * added is_wrapper to test * removed isWrapper * Rise Bid Adapter: support Coppa param (#24) * MinuteMedia Bid Adapter: support Coppa param (#25) * Revert "MinuteMedia Bid Adapter: support Coppa param (#25)" (#26) This reverts commit 66c4e7b. * bump * update coppa fetch * setting coppa param update * update Coppa tests * update test naming * Rise Bid Adapter: support plcmt and sua (#27) * update minuteMediaBidAdapter - support missing params (#29) * add currency param to bid object and tests * update getFloor function and tests * adding test to currency param * adding doc & currency bidfloor support & update tests * update currency test * remove default test --------- Co-authored-by: Noam Tzuberi <noam.tzuberi@ironsrc.com> Co-authored-by: noamtzu <noamtzu@gmail.com> Co-authored-by: Noam Tzuberi <noamtzu@users.noreply.github.com> Co-authored-by: Laslo Chechur <laslo.chechur@ironsrc.com> Co-authored-by: OronW <41260031+OronW@users.noreply.github.com> Co-authored-by: lasloche <62240785+lasloche@users.noreply.github.com> Co-authored-by: inna <innayare@gmail.com> Co-authored-by: YakirLavi <yakir.lavi@risecodes.com>

* add Rise adapter * fixes * change param isOrg to org * Rise adapter * change email for rise * fix circle failed * bump * bump * bump * remove space * Upgrade Rise adapter to 5.0 * added isWrapper param * addes is_wrapper parameter to documentation * added is_wrapper to test * removed isWrapper * Rise Bid Adapter: support Coppa param (#24) * MinuteMedia Bid Adapter: support Coppa param (#25) * Revert "MinuteMedia Bid Adapter: support Coppa param (#25)" (#26) This reverts commit 66c4e7b. * bump * update coppa fetch * setting coppa param update * update Coppa tests * update test naming * Rise Bid Adapter: support plcmt and sua (#27) * update minuteMediaBidAdapter - support missing params (#29) * support gpp for minutemedia adapter * removed spaces * removed extra character --------- Co-authored-by: Noam Tzuberi <noam.tzuberi@ironsrc.com> Co-authored-by: noamtzu <noamtzu@gmail.com> Co-authored-by: Noam Tzuberi <noamtzu@users.noreply.github.com> Co-authored-by: Laslo Chechur <laslo.chechur@ironsrc.com> Co-authored-by: OronW <41260031+OronW@users.noreply.github.com> Co-authored-by: lasloche <62240785+lasloche@users.noreply.github.com> Co-authored-by: YakirLavi <73641910+YakirLavi@users.noreply.github.com> Co-authored-by: YakirLavi <yakir.lavi@risecodes.com> Co-authored-by: Inna Yaretsky <>

Co-authored-by: “Nick <“nick.llerandi”@kargo.com>

kerenga pushed a commit that referenced this pull request Apr 14, 2024

refactors code for userIds; updates userId tests (#29) (prebid#11298)

db0b1bd

Co-authored-by: “Nick <“nick.llerandi”@kargo.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

[Snyk] Upgrade: @babel/core, @babel/runtime, @babel/preset-env#29

[Snyk] Upgrade: @babel/core, @babel/runtime, @babel/preset-env#29
snyk-bot wants to merge 1 commit intomasterfrom
snyk-upgrade-4a13c8006abe12656b1d1f0ac920fafc

snyk-bot commented Jan 26, 2023

v7.20.12 (2023-01-04)

🐛 Bug Fix

💅 Polish

Committers: 5

v7.20.7 (2022-12-22)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 6

v7.20.5 (2022-11-28)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 6

v7.20.6 (2022-11-28)

🐛 Bug Fix

Committers: 1

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

snyk-bot commented Jan 26, 2023

Snyk has created this PR to upgrade multiple dependencies.

v7.20.12 (2023-01-04)

🐛 Bug Fix

💅 Polish

Committers: 5

v7.20.7 (2022-12-22)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 6

v7.20.5 (2022-11-28)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 6

v7.20.6 (2022-11-28)

🐛 Bug Fix

Committers: 1

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant