Skip to content
Sign up

john-peterson-g17/todo-app

public
00

A simple todo app

Upgrade @babel/core to 7.29.6 #27

Openg1tbot wants to merge g1t/security/babel-core-7.29.6 into masterdependenciesjavascript

Other work is changing the same files

Whichever merges second will have to catch up, and may conflict.

g1tbotopened this pull request

Upgrades @babel/core (npm) from 7.22.9 to 7.29.6, which fixes these known vulnerabilities:

AdvisorySeverityAffectedFixed inSummary
GHSA-4x5r-pxfx-6jf8low7.22.97.29.6@babel/core: Arbitrary File Read via sourceMappingURL Comment

Lockfiles changed: src/package-lock.json.

Only the version changes. This pull request lands through this branch's required checks like any other. If they fail because code has to change, g1t closes it and puts g1t on an issue to make the change.

Opened by g1t's security updates. Turn them off for this project on its Security page.

g1tbotadded the dependencies and javascript labels·
g1tbotcommented

Dependency review

Passed. 67 dependency changes, none vulnerable.

src/package-lock.json

ChangePackageVersionRelationshipLicenseVulnerabilities
Added@babel/code-frame7.29.7transitive, developmentMITnone known
Added@babel/compat-data7.29.7transitive, developmentMITnone known
Added@babel/core7.29.7transitive, developmentMITnone known
Added@babel/generator7.29.8transitive, developmentMITnone known
Added@babel/helper-compilation-targets7.29.7transitive, developmentMITnone known
Added@babel/helper-globals7.29.7transitive, developmentMITnone known
Added@babel/helper-module-imports7.29.7transitive, developmentMITnone known
Added@babel/helper-module-transforms7.29.7transitive, developmentMITnone known
Added@babel/helper-string-parser7.29.7transitiveMITnone known
Added@babel/helper-validator-identifier7.29.7transitiveMITnone known
Added@babel/helper-validator-option7.29.7transitive, developmentMITnone known
Added@babel/helpers7.29.10transitive, developmentMITnone known
Added@babel/parser7.29.9transitiveMITnone known
Added@babel/template7.29.7transitive, developmentMITnone known
Added@babel/traverse7.29.10transitive, developmentMITnone known
Added@babel/types7.29.8transitiveMITnone known
Added@jridgewell/gen-mapping0.3.13transitive, developmentMITnone known
Added@jridgewell/remapping2.3.5transitive, developmentMITnone known
Added@jridgewell/resolve-uri3.1.2transitive, developmentMITnone known
Added@jridgewell/sourcemap-codec1.6.0transitiveMITnone known
Added@jridgewell/trace-mapping0.3.31transitive, developmentMITnone known
Addedbaseline-browser-mapping2.11.29transitive, developmentApache-2.0none known
Addedbrowserslist4.29.3transitive, developmentMITnone known
Addedcaniuse-lite1.0.30001816transitive, developmentCC-BY-4.0none known
Addedconvert-source-map2.0.0transitive, developmentMITnone known
Addedelectron-to-chromium1.5.458transitive, developmentISCnone known
Addedescalade3.2.0transitive, developmentMITnone known
Addedjsesc3.1.0transitive, developmentMITnone known
Addednode-releases2.0.59transitive, developmentMITnone known
Addedpicocolors1.1.1transitiveISCnone known
Addedupdate-browserslist-db1.3.4transitive, developmentMITnone known
Removed@ampproject/remapping2.2.1transitiveunknown
Removed@babel/code-frame7.22.5transitiveunknown
Removed@babel/compat-data7.22.9transitiveunknown
Removed@babel/core7.22.9transitiveunknown
Removed@babel/generator7.22.9transitiveunknown
Removed@babel/helper-compilation-targets7.22.9transitiveunknown
Removed@babel/helper-hoist-variables7.22.5transitiveunknown
Removed@babel/helper-module-imports7.22.5transitiveunknown
Removed@babel/helper-module-transforms7.22.9transitiveunknown
Removed@babel/helper-simple-access7.22.5transitiveunknown
Removed@babel/helper-string-parser7.22.5transitiveunknown
Removed@babel/helper-validator-identifier7.22.5transitiveunknown
Removed@babel/helper-validator-option7.22.5transitiveunknown
Removed@babel/helpers7.22.6transitiveunknown
Removed@babel/highlight7.22.5transitiveunknown
Removed@babel/parser7.22.7transitiveunknown
Removed@babel/template7.22.5transitiveunknown
Removed@babel/traverse7.22.8transitiveunknown
Removed@babel/types7.22.5transitiveunknown
Removed@jridgewell/gen-mapping0.3.3transitiveunknown
Removed@jridgewell/resolve-uri3.1.0transitiveunknown
Removed@jridgewell/set-array1.1.2transitiveunknown
Removed@jridgewell/sourcemap-codec1.4.14transitiveunknown
Removed@jridgewell/sourcemap-codec1.4.15transitiveunknown
Removed@jridgewell/trace-mapping0.3.18transitiveunknown
Removedbrowserslist4.21.9transitiveunknown
Removedcaniuse-lite1.0.30001517transitiveunknown
Removedconvert-source-map1.9.0transitiveunknown
Removedelectron-to-chromium1.4.467transitiveunknown
Removedescalade3.1.1transitiveunknown
Removedglobals11.12.0transitiveunknown
Removedjsesc2.5.2transitiveunknown
Removednode-releases2.0.13transitiveunknown
Removedpicocolors1.0.0transitiveunknown
Removedto-fast-properties2.0.0transitiveunknown
Removedupdate-browserslist-db1.0.11transitiveunknown

This check fails on vulnerabilities of high severity or higher. Change it in the repository's Security settings.

All checks have passed

2 passed · none are required, so none hold the merge

Workflows

Dependency review — 67 dependency changes, none vulnerableDetails
g1t / deploy — Preview is live

No reviews yet

Up to date with master

Sign in to comment.