fix(deps): update dependency @babel/traverse to v7.23.2 [security]

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@babel/traverse (source)	7.19.1 → 7.23.2

---

Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

CVE-2023-45133 / GHSA-67hx-6x53-jw92

More information

Details

Impact

Using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that rely on the path.evaluate()or path.evaluateTruthy() internal Babel methods.

Known affected plugins are:

• @babel/plugin-transform-runtime
• @babel/preset-env when using its useBuiltIns option
• Any "polyfill provider" plugin that depends on @babel/helper-define-polyfill-provider, such as babel-plugin-polyfill-corejs3, babel-plugin-polyfill-corejs2, babel-plugin-polyfill-es-shims, babel-plugin-polyfill-regenerator

No other plugins under the @babel/ namespace are impacted, but third-party plugins might be.

Users that only compile trusted code are not impacted.

Patches

The vulnerability has been fixed in @babel/traverse@7.23.2.

Babel 6 does not receive security fixes anymore (see Babel's security policy), hence there is no patch planned for babel-traverse@6.

Workarounds

• Upgrade @babel/traverse to v7.23.2 or higher. You can do this by deleting it from your package manager's lockfile and re-installing the dependencies. @babel/core >=7.23.2 will automatically pull in a non-vulnerable version.
• If you cannot upgrade @babel/traverse and are using one of the affected packages mentioned above, upgrade them to their latest version to avoid triggering the vulnerable code path in affected @babel/traverse versions:
  • @babel/plugin-transform-runtime v7.23.2
  • @babel/preset-env v7.23.2
  • @babel/helper-define-polyfill-provider v0.4.3
  • babel-plugin-polyfill-corejs2 v0.4.6
  • babel-plugin-polyfill-corejs3 v0.8.5
  • babel-plugin-polyfill-es-shims v0.10.0
  • babel-plugin-polyfill-regenerator v0.5.3

Severity

• CVSS Score: 9.3 / 10 (Critical)
• Vector String: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

• https://github.com/babel/babel/security/advisories/GHSA-67hx-6x53-jw92
• https://nvd.nist.gov/vuln/detail/CVE-2023-45133
• https://github.com/babel/babel/pull/16033
• https://github.com/babel/babel/commit/b13376b346946e3f62fc0848c1d2a23223314c82
• https://github.com/babel/babel/releases/tag/v7.23.2
• https://github.com/babel/babel/releases/tag/v8.0.0-alpha.4
• https://www.debian.org/security/2023/dsa-5528
• https://lists.debian.org/debian-lts-announce/2023/10/msg00026.html
• https://babeljs.io/blog/2023/10/16/cve-2023-45133
• https://github.com/advisories/GHSA-67hx-6x53-jw92

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

babel/babel (@​babel/traverse)

v7.23.2

Compare Source

🐛 Bug Fix

• babel-traverse
  • #​16033 Only evaluate own String/Number/Math methods (@​nicolo-ribaudo)
• babel-preset-typescript
  • #​16022 Rewrite .tsx extension when using rewriteImportExtensions (@​jimmydief)
• babel-helpers
  • #​16017 Fix: fallback to typeof when toString is applied to incompatible object (@​JLHwung)
• babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16025 Avoid override mistake in namespace imports (@​nicolo-ribaudo)

v7.23.0

Compare Source

🚀 New Feature

• babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import
  • #​15870 Support transforming import source for wasm (@​nicolo-ribaudo)
• babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  • #​15878 Implement import defer proposal transform support (@​nicolo-ribaudo)
• babel-generator, babel-parser, babel-types
  • #​15845 Implement import defer parsing support (@​nicolo-ribaudo)
  • #​15829 Add parsing support for the "source phase imports" proposal (@​nicolo-ribaudo)
• babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types
  • #​15682 Add createImportExpressions parser option (@​JLHwung)
• babel-standalone
  • #​15671 Pass through nonce to the transformed script element (@​JLHwung)
• babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types
  • #​15751 Add support for optional chain in assignments (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-proposal-decorators
  • #​15895 Implement the "decorator metadata" proposal (@​nicolo-ribaudo)
• babel-traverse, babel-types
  • #​15893 Add t.buildUndefinedNode (@​liuxingbaoyu)
• babel-preset-typescript
  • #​15913 Add rewriteImportExtensions option to TS preset (@​nicolo-ribaudo)
• babel-parser
  • #​15896 Allow TS tuples to have both labeled and unlabeled elements (@​yukukotani)

🐛 Bug Fix

• babel-plugin-transform-block-scoping
  • #​15962 fix: transform-block-scoping captures the variables of the method in the loop (@​liuxingbaoyu)

💅 Polish

• babel-traverse
  • #​15797 Expand evaluation of global built-ins in @babel/traverse (@​lorenzoferre)
• babel-plugin-proposal-explicit-resource-management
  • #​15985 Improve source maps for blocks with using declarations (@​nicolo-ribaudo)

🔬 Output optimization

• babel-core, babel-helper-module-transforms, babel-plugin-transform-async-to-generator, babel-plugin-transform-classes, babel-plugin-transform-dynamic-import, babel-plugin-transform-function-name, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-inline-elements, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env
  • #​15984 Inline exports.XXX = update in simple variable declarations (@​nicolo-ribaudo)

v7.22.20

Compare Source

🏠 Internal

• babel-helper-validator-identifier
  • #​15973 Remove special-casing of U+200C and U+200D (@​nicolo-ribaudo)
• babel-plugin-transform-dotall-regex
  • #​15974 Update Unicode test fixtures (@​JLHwung)

↩️ Revert

• babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
  • #​15979 Revert "Improve output when wrapping functions" (@​jjonescz)

v7.22.19

Compare Source

v7.22.19 (2023-09-14)

Re-published 7.22.18, due to a releasing error.

v7.22.18

Compare Source

🐛 Bug Fix

• babel-helper-validator-identifier
  • #​15957 Update identifier name definitions to Unicode 15.1 (@​JLHwung)
• babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  • #​15898 Fix transform of named import with shadowed namespace import (@​dhlolo)

↩️ Revert

• #​15965 Revert Node.js 20.6.0 bug workaround (@​nicolo-ribaudo)

v7.22.17

Compare Source

🐛 Bug Fix

• babel-core
  • #​15947 Fix compatibility with Node.js 20.6 (@​nicolo-ribaudo)
• babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
  • #​15941 Fix compiling duplicate ns imports to lazy CommonJS (@​nicolo-ribaudo)
• babel-types
  • #​15920 Make ClassDeclaration["id"] optional in babel-types (@​jordanbtucker)

🔬 Output optimization

• babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
  • #​15922 Improve output when wrapping functions (e.g. async functions) (@​liuxingbaoyu)

v7.22.15

Compare Source

🐛 Bug Fix

• babel-core
  • #​15923 Only perform config loading re-entrancy check for cjs (@​nicolo-ribaudo)

🏠 Internal

• babel-cli, babel-core, babel-generator, babel-helper-builder-binary-assignment-operator-visitor, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-helper-validator-option, babel-helpers, babel-node, babel-parser, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-async-generator-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-for-of, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-property-mutators, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env, babel-preset-flow, babel-preset-react, babel-preset-typescript, babel-register, babel-standalone, babel-template, babel-traverse, babel-types
  • #​15892 Add explicit .ts/.js extension to all imports in src (@​nicolo-ribaudo)

v7.22.11

Compare Source

🐛 Bug Fix

• babel-plugin-transform-typescript
  • #​15882 Fix: fully remove TS nested type-only exported namespaces (@​yangguansen)
• babel-types
  • #​15867 fix: definition of TS function type params (@​danez)
• babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object
  • #​15858 fix(standalone): strip archived syntax plugins (@​JLHwung)
• babel-core
  • #​15850 Support configuring cache in ESM configs (@​nicolo-ribaudo)

🏠 Internal

• babel-parser
  • #​10940 Do not record trailing comma pos when maybeAsyncArrow: false (@​JLHwung)
• babel-core, babel-helper-compilation-targets, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decorators, babel-preset-env, babel-preset-react, babel-register, babel-traverse, babel-types
  • #​15872 enable jest/no-standalone-expect (@​JLHwung)
• babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-modules-commonjs, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​15833 bump json5, terser and webpack, further minimize babel helpers (@​JLHwung)
• Other
  • #​15846 Use Babel 8.0 alpha to build babel (@​JLHwung)
  • #​15856 Exclude redundant files from publish process (@​JLHwung)

🔬 Output optimization

• babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-optional-chaining, babel-preset-env
  • #​15871 Simplify ?. output when chain result is ignored (@​nicolo-ribaudo)

v7.22.10

Compare Source

🐛 Bug Fix

• babel-plugin-transform-typescript
  • #​15799 [ts] Strip type-only namespaces (@​nicolo-ribaudo)
  • #​15798 [ts] Fix compiling extended exported nested namespace (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
  • #​15701 Memoize class binding when compiling private methods and static elements (@​JLHwung)

💅 Polish

• babel-cli
  • #​15824 Add meta object to @babel/eslint-plugin (@​JLHwung)
• babel-traverse, babel-types
  • #​15661 Improve the type definition of path.isX (@​liuxingbaoyu)
• babel-generator, babel-types
  • #​15776 improve SourceLocation typing (@​JLHwung)

🏠 Internal

• Other
  • #​15818 build: generate flow typings in prepublish job (@​JLHwung)
  • #​15777 chore: bump dev dependencies and remove .eslintignore (@​JLHwung)
• babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
  • #​15794 Enable @typescript-eslint/no-redundant-type-constituents rule (@​JLHwung)
• babel-helper-compilation-targets
  • #​15811 Remove @babel/core peerDep from helper-compilation-targets (@​nicolo-ribaudo)
• babel-parser
  • #​15793 Use const enum in babel-parser (@​JLHwung)
• babel-plugin-transform-runtime, babel-traverse, babel-types
  • #​15716 chore: Use typescript-eslint@v6 with reworked configs (@​JoshuaKGoldberg)

🔬 Output optimization

• babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator
  • #​15746 Reduce transform-block-scoping loops output size (@​liuxingbaoyu)

v7.22.8

Compare Source

↩️ Revert

• babel-core, babel-traverse
  • #​15754 Revert "Use NodePath#hub as part of the paths cache key" (@​nicolo-ribaudo)

v7.22.7

Compare Source

🐛 Bug Fix

• babel-generator
  • #​15719 fix: Avoid internally generating negative source maps columns (@​liuxingbaoyu)
• babel-core, babel-traverse
  • #​15725 Use NodePath#hub as part of the paths cache key (@​nicolo-ribaudo)
• Other
  • #​15747 fix: export meta from eslint-parser/experimental-worker (@​JLHwung)

🏠 Internal

• babel-core, babel-traverse
  • #​15702 Refactor visitors merging (@​nullableVoidPtr)

v7.22.6

Compare Source

🐛 Bug Fix

• babel-compat-data, babel-helper-compilation-targets, babel-preset-env
  • #​15727 Add opera mobile compat data (@​JLHwung)
• babel-plugin-transform-optional-chaining
  • #​15739 Fix transform of delete a?.b in function params (@​nicolo-ribaudo)
• babel-helper-split-export-declaration, babel-plugin-transform-modules-commonjs
  • #​15736 fix: Default export for duplicate names (@​liuxingbaoyu)
• babel-compat-data, babel-preset-env
  • #​15726 update compat-data sources (@​JLHwung)
• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3, babel-runtime
  • #​15705 Fix handling of sync error in @@​asyncDispose (@​nicolo-ribaudo)
• babel-standalone
  • #​15707 fix: Support transforming Explicit Resource Management in stage-2 (@​liuxingbaoyu)
• babel-core
  • #​15626 fix: Works correctly with --frozen-intrinsics (@​liuxingbaoyu)

🏠 Internal

• babel-helper-create-class-features-plugin, babel-plugin-transform-classes
  • #​15700 Minor class transform cleanups (@​JLHwung)

🔬 Output optimization

• babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-transform-class-properties, babel-plugin-transform-optional-chaining, babel-plugin-transform-typescript
  • #​15740 Compress output for optional chain with multiple ?. (@​nicolo-ribaudo)
• babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-traverse
  • #​15741 Inject tmp vars in the params list of IIFEs when possible (@​nicolo-ribaudo)

v7.22.5

Compare Source

🐛 Bug Fix

• babel-preset-env, babel-standalone
  • #​15675 Fix using syntax-unicode-sets-regex in standalone (@​nicolo-ribaudo)

💅 Polish

• babel-core
  • #​15683 Suggest -transform- when resolving missing plugins (@​nicolo-ribaudo)

v7.22.4

Compare Source

🐛 Bug Fix

• babel-traverse
  • #​15649 Set shorthand: false when renaming an identifier inside an object property (@​coderaiser)

🏠 Internal

• babel-types
  • #​15666 Add missing attributes/assertions to VISITOR_KEYS (@​nicolo-ribaudo)
• babel-parser
  • #​15667 Mark assert attributes with extra.deprecatedAssertSyntax (@​nicolo-ribaudo)

v7.22.1

Compare Source

🐛 Bug Fix

• babel-helper-validator-identifier
  • #​15957 Update identifier name definitions to Unicode 15.1 (@​JLHwung)
• babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  • #​15898 Fix transform of named import with shadowed namespace import (@​dhlolo)

↩️ Revert

• #​15965 Revert Node.js 20.6.0 bug workaround (@​nicolo-ribaudo)

v7.22.0

Compare Source

🚀 New Feature

• babel-parser, babel-plugin-transform-typescript
  • #​15497 [ts] Support import ... = and export = in scripts (@​nicolo-ribaudo)
• babel-compat-data, babel-core, babel-plugin-proposal-unicode-sets-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-standalone
  • #​15636 Add unicode-sets-regex transform to preset-env (@​JLHwung)
• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-runtime, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  • #​15633 Implement transform support for using declarations (@​nicolo-ribaudo)
• babel-plugin-proposal-import-attributes-to-assertions
  • #​15620 Create @babel/plugin-proposal-import-attributes-to-assertions (@​nicolo-ribaudo)
• babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • #​15536 Add support for the updated import attributes proposal (@​nicolo-ribaudo)
• babel-generator, babel-parser, babel-traverse, babel-types
  • #​15520 Parse await using declarations (@​JLHwung)
• babel-core, babel-helper-create-regexp-features-plugin, babel-parser
  • #​15638 Enable regexp unicode sets parsing by default (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators, babel-plugin-syntax-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​15570 Add decorators version 2023-05 (@​nicolo-ribaudo)

💅 Polish

• babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-jsx, babel-traverse, babel-types
  • #​15549 Improve type definitions for validators (@​liuxingbaoyu)

🏠 Internal

• babel-parser
  • #​15630 Unify parsing of import/export modifiers (type/typeof/module) (@​nicolo-ribaudo)
• babel-compat-data, babel-helper-transform-fixture-test-runner, babel-node, babel-plugin-proposal-decorators, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-async-generator-functions, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • #​15531 Allow polyfill providers to specify custom @babel/runtime pkg (@​nicolo-ribaudo)
• babel-core, babel-plugin-proposal-async-generator-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-decorators, babel-plugin-proposal-dynamic-import, babel-plugin-proposal-export-namespace-from, babel-plugin-proposal-function-sent, babel-plugin-proposal-json-strings, babel-plugin-proposal-logical-assignment-operators, babel-plugin-proposal-nullish-coalescing-operator, babel-plugin-proposal-numeric-separator, babel-plugin-proposal-object-rest-spread, babel-plugin-proposal-optional-catch-binding, babel-plugin-proposal-optional-chaining, babel-plugin-proposal-pipeline-operator, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-plugin-proposal-unicode-property-regex, babel-preset-env, babel-standalone
  • #​15614 Rename -proposal-s that became standard to -transform- (@​nicolo-ribaudo)

v7.21.5

Compare Source

👓 Spec Compliance

• babel-generator, babel-parser, babel-types
  • #​15539 fix: Remove mixins and implements for DeclareInterface and InterfaceDeclaration (@​liuxingbaoyu)

🐛 Bug Fix

• babel-core, babel-generator, babel-plugin-transform-modules-commonjs, babel-plugin-transform-react-jsx
  • #​15515 fix: ) position with createParenthesizedExpressions (@​liuxingbaoyu)
• babel-preset-env
  • #​15580 Add syntax import meta to preset env (@​JLHwung)

💅 Polish

• babel-types
  • #​15546 Improve the layout of generated validators (@​liuxingbaoyu)
• babel-core
  • #​15535 Use lt instead of lte to check TS version for .cts config (@​nicolo-ribaudo)

🏠 Internal

• babel-core
  • #​15575 Use synchronous import.meta.resolve (@​nicolo-ribaudo)
• babel-helper-fixtures, babel-preset-typescript
  • #​15568 Handle .overrides and .env when resolving plugins/presets from fixture options (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin
  • #​15548 Use semver package to compare versions (@​nicolo-ribaudo)

v7.21.4

Compare Source

🐛 Bug Fix

• babel-core, babel-helper-module-imports, babel-preset-typescript
  • #​15478 Fix support for import/export in .cts files (@​liuxingbaoyu)
• babel-generator
  • #​15496 Fix compact printing of non-null assertion operators (@​rtsao)

💅 Polish

• babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties, babel-plugin-transform-typescript, babel-traverse
  • #​15427 Fix moving comments of removed nodes (@​nicolo-ribaudo)

🏠 Internal

• Other
  • #​15519 Update Prettier integration test (@​fisker)
• babel-parser
  • #​15510 refactor: introduce lookaheadInLineCharCode (@​JLHwung)
• babel-code-frame, babel-highlight
  • #​15499 Polish babel-code-frame highlight test (@​JLHwung)

v7.21.3

Compare Source

👓 Spec Compliance

• babel-parser
  • #​15479 disallow mixins/implements in flow interface (@​JLHwung)

🐛 Bug Fix

• babel-parser
  • #​15423 [ts] Allow keywords in tuple labels (@​Harpica)
• babel-plugin-transform-typescript
  • #​15489 Register var decls generated by import ... = TS transform (@​amoeller)
  • #​15494 fix: Consider export { type foo } as type-only usage (@​magic-akari)

💅 Polish

• babel-traverse, babel-types
  • #​15484 Skip node deprecation warnings when used by an old @babel package (@​nicolo-ribaudo)
• babel-generator
  • #​15480 chore: Improve jsonCompatibleStrings deprecation (@​liuxingbaoyu)

🏠 Internal

• #​15465 Add ESLint-readable package name (@​nzakas)

🔬 Output optimization

• babel-plugin-transform-typescript, babel-preset-typescript
  • #​15467 Optimize TS enums output (@​liuxingbaoyu)

v7.21.2

Compare Source

👓 Spec Compliance

• babel-parser
  • #​15439 fix: Throws on new foo?.bar!() (@​liuxingbaoyu)

💅 Polish

• babel-traverse, babel-types
  • #​15448 Reduce warnings for deprecated node aliases (@​nicolo-ribaudo)

🏠 Internal

• babel-types
  • #​15451 Update babel-types docs generator (@​JLHwung)

🔬 Output optimization

• babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
  • #​15449 Avoid unnecessary code for unused lazy imports (@​nicolo-ribaudo)

v7.21.0

Compare Source

🚀 New Feature

• babel-core, babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object
  • #​15435 feat: Implement privateFieldsAsSymbols assumption for classes (@​fwienber)
• babel-helper-create-regexp-features-plugin, babel-plugin-proposal-regexp-modifiers, babel-standalone
  • #​15226 feat: Support regexp modifiers proposal (@​liuxingbaoyu)
• babel-cli, babel-core, babel-generator, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-plugin-transform-react-jsx, babel-traverse
  • #​15022 feat: Generate sourcemaps of friendly call frames (@​liuxingbaoyu)
• babel-parser, babel-types
  • #​15384 [ts] Support const modifier in type parameters (@​nicolo-ribaudo)
• babel-generator, babel-helpers, babel-parser, babel-plugin-proposal-decorators, babel-plugin-syntax-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​15405 Implement decorators as presented at 2023-01 TC39 meeting (@​nicolo-ribaudo)
• babel-parser
  • #​15114 Parser option to allow new.target outside functions (@​overlookmotel)
  • #​15320 Add annexb: false parser option to disable Annex B (@​nicolo-ribaudo)
• babel-core
  • #​15283 feat: Support .cts as configuration file (@​liuxingbaoyu)
• babel-generator, babel-parser, babel-plugin-transform-typescript
  • #​15381 [ts] Support export type * from (@​nicolo-ribaudo)

🐛 Bug Fix

• babel-plugin-transform-typescript
  • #​15379 [ts5.0] Better inlining of constants in enums (@​liuxingbaoyu)
• babel-core
  • #​15366 handling circular/shared structures in deep-clone (@​azizghuloum)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-private-methods, babel-plugin-transform-classes, babel-plugin-transform-new-target
  • #​15406 Preserve class elements comments in class transform (@​JLHwung)
• babel-parser, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-types
  • #​15414 [ts] Fix restrictions for optional parameters (@​nicolo-ribaudo)

💅 Polish

• babel-parser
  • #​15400 polish: improve "await as identifier" error in modules (@​JLHwung)

🏠 Internal

• babel-core
  • #​15137 Improve CJS compat with ESM-based @babel/core (@​nicolo-ribaudo)

🔬 Output optimization

• babel-plugin-transform-typescript
  • #​15418 [ts] Handle exponentiation operator in constant folding (@​ehoogeveen-medweb)

v7.20.13

Compare Source

🐛 Bug Fix

• babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​15332 Ensure class decorators can access decorated non-static members (@​JLHwung)
• babel-plugin-transform-typescript
  • #​15349 fix: Preserve import {type T} from 'x' when onlyRemoveTypeImports:true (@​liuxingbaoyu)
  • #​15344 fix: Properties that are abstract should not be initialized. (@​liuxingbaoyu)
• babel-parser
  • #​15338 Allow negative number in ambient const initializer (@​JLHwung)

↩️ Revert

• babel-plugin-transform-react-inline-elements, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  • #​15355 Reverts "Re-use common JSX element transform for <>...</>" (@​JLHwung)

v7.20.12

Compare Source

🐛 Bug Fix

• babel-traverse
  • #​15224 Fix TaggedTemplateLiteral evaluation (@​nmn)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties
  • #​15312 fix: delete this in static class properties initialization (@​SuperSodaSea)

💅 Polish

• babel-traverse
  • #​15313 Implement support for evaluating computed properties. (@​JBYoshi)

v7.20.10

Compare Source

🐛 Bug Fix

• babel-traverse
  • #​15305 fix: guessExecutionStatusRelativeTo exception (@​liuxingbaoyu)

v7.20.8

Compare Source

🐛 Bug Fix

• babel-plugin-transform-block-scoping
  • #​15301 fix: transform-block-scoping accesses properties of null (@​liuxingbaoyu)
• babel-plugin-proposal-class-properties, babel-traverse
  • #​15294 Properly transpile exported classes that shadowed builtins (@​JLHwung)

v7.20.7

Compare Source

👓 Spec Compliance

• babel-helper-member-expression-to-functions, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes
  • #​15223 fix: Deleting super property should throw (@​SuperSodaSea)
• babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes, babel-plugin-transform-object-super
  • #​15241 fix: Throw correct error types from sed ant class TDZ helpers (@​SuperSodaSea)

🐛 Bug Fix

• babel-parser, babel-plugin-transform-typescript
  • #​15209 fix: Support auto accessors with TypeScript annotations (@​liuxingbaoyu)
• babel-traverse
  • #​15287 Fix .parentPath after rename in SwitchCase (@​nicolo-ribaudo)
• babel-plugin-transform-typescript, babel-traverse
  • #​15284 fix: Ts import type and func with duplicate name (@​liuxingbaoyu)
• babel-plugin-transform-block-scoping
  • #​15278 Fix tdz analysis for reassigned captured for bindings (@​nicolo-ribaudo)
• babel-plugin-proposal-async-generator-functions, babel-preset-env
  • #​15235 fix: Transform for await with shadowed variables (@​liuxingbaoyu)
• babel-generator, babel-plugin-proposal-optional-chaining
  • #​15258 fix: Correctly generate (a ?? b) as T (@​liuxingbaoyu)
• babel-plugin-transform-react-jsx, babel-types
  • #​15233 fix: Emit correct sourcemap ranges for JSXText (@​liuxingbaoyu)
• babel-core, babel-helpers, babel-plugin-transform-computed-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​15232 fix: Computed properties should keep original definition order (@​SuperSodaSea)
• babel-helper-member-expression-to-functions, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes
  • #​15223 fix: Deleting super property should throw (@​SuperSodaSea)
• babel-generator
  • #​15216 fix: Print newlines for leading Comments of TSEnumMember (@​liuxingbaoyu)

💅 Polish

• babel-plugin-transform-block-scoping, babel-traverse
  • #​15275 Improve relative execution tracking in fn exprs (@​nicolo-ribaudo)

🏠 Internal

• babel-helper-define-map, babel-plugin-transform-property-mutators
  • #​15274 Inline & simplify @babel/helper-define-map (@​nicolo-ribaudo)
• babel-core, babel-plugin-proposal-class-properties, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-parameters, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-traverse
  • #​15200 Rewrite transform-block-scoping plugin (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-helper-compilation-targets
  • #​15228 perf: Speed up getTargets (@​liuxingbaoyu)

v7.20.5

Compare Source

👓 Spec Compliance

• babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-traverse
  • #​15183 Improve array destructuring spec compliance (@​SuperSodaSea)
• babel-cli, babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-transform-classes, babel-plugin-transform-runtime, babel-preset-env
  • #​15182 fix: apply toPropertyKey when defining class members ([@&#82

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 7 workspace projects
.                                        |  WARN  Ignoring broken lockfile at /tmp/renovate/repos/github/ksv-vc/postbote: Lockfile /tmp/renovate/repos/github/ksv-vc/postbote/pnpm-lock.yaml not compatible with current pnpm
 WARN  GET https://registry.npmjs.org/@testing-library%2Freact error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fcolor error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fhtml-minifier error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fjest error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@typescript-eslint%2Feslint-plugin error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@typescript-eslint%2Fparser error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-config-prettier error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-import error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-jsx-a11y error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-react error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-react-hooks error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/typescript error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fmjml error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Freact error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Freact-dom error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/@testing-library%2Freact error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fcolor error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fhtml-minifier error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fjest error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@typescript-eslint%2Feslint-plugin error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@typescript-eslint%2Fparser error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint-config-prettier error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-import error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-jsx-a11y error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-react error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/eslint-plugin-react-hooks error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/typescript error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Fmjml error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Freact error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 WARN  GET https://registry.npmjs.org/@types%2Freact-dom error (ERR_INVALID_THIS). Will retry in 1 minute. 1 retries left.
 ERR_PNPM_META_FETCH_FAIL  GET https://registry.npmjs.org/@testing-library%2Freact: Value of "this" must be of type URLSearchParams
 WARN  GET https://registry.npmjs.org/expect-type error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/jest error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/jest-environment-node error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.
 WARN  GET https://registry.npmjs.org/ts-jest error (ERR_INVALID_THIS). Will retry in 10 seconds. 2 retries left.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 7fcae0b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR