Upgrade @babel/traverse to 7.23.2 · Pull request #3 · john-peterson-g17/todo-app

g1tbotopened this pull request15h ago

Upgrades @babel/traverse (npm) from 7.22.8 to 7.23.2, which fixes these known vulnerabilities:

Advisory	Severity	Affected	Fixed in	Summary
GHSA-67hx-6x53-jw92	critical	7.22.8	7.23.2	Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

Lockfiles changed: src/package-lock.json.

Only the version changes. This pull request lands through this branch's required checks like any other. If they fail because code has to change, g1t closes it and puts g1t on an issue to make the change.

Opened by g1t's security updates. Turn them off for this project on its Security page.

g1tbotadded the dependencies and javascript labels· 15h ago

g1tbotcommented15h ago

Dependency review

Passed. 33 dependency changes, none vulnerable.

src/package-lock.json

Change	Package	Version	Relationship	License	Vulnerabilities
Added	`@babel/code-frame`	7.29.7	transitive, development	MIT	none known
Added	`@babel/generator`	7.29.8	transitive, development	MIT	none known
Added	`@babel/helper-globals`	7.29.7	transitive, development	MIT	none known
Added	`@babel/helper-string-parser`	7.29.7	transitive	MIT	none known
Added	`@babel/helper-validator-identifier`	7.29.7	transitive	MIT	none known
Added	`@babel/parser`	7.29.9	transitive	MIT	none known
Added	`@babel/template`	7.29.7	transitive, development	MIT	none known
Added	`@babel/traverse`	7.29.10	transitive, development	MIT	none known
Added	`@babel/types`	7.29.8	transitive	MIT	none known
Added	`@jridgewell/gen-mapping`	0.3.13	transitive, development	MIT	none known
Added	`@jridgewell/sourcemap-codec`	1.6.0	transitive	MIT	none known
Added	`@jridgewell/trace-mapping`	0.3.31	transitive, development	MIT	none known
Added	`jsesc`	3.1.0	transitive, development	MIT	none known
Added	`picocolors`	1.1.1	transitive	ISC	none known
Removed	`@babel/code-frame`	7.22.5	transitive	unknown
Removed	`@babel/generator`	7.22.9	transitive	unknown
Removed	`@babel/helper-hoist-variables`	7.22.5	transitive	unknown
Removed	`@babel/helper-string-parser`	7.22.5	transitive	unknown
Removed	`@babel/helper-validator-identifier`	7.22.5	transitive	unknown
Removed	`@babel/highlight`	7.22.5	transitive	unknown
Removed	`@babel/parser`	7.22.7	transitive	unknown
Removed	`@babel/template`	7.22.5	transitive	unknown
Removed	`@babel/traverse`	7.22.8	transitive	unknown
Removed	`@babel/types`	7.22.5	transitive	unknown
Removed	`@jridgewell/gen-mapping`	0.3.3	transitive	unknown
Removed	`@jridgewell/set-array`	1.1.2	transitive	unknown
Removed	`@jridgewell/sourcemap-codec`	1.4.14	transitive	unknown
Removed	`@jridgewell/sourcemap-codec`	1.4.15	transitive	unknown
Removed	`@jridgewell/trace-mapping`	0.3.18	transitive	unknown
Removed	`globals`	11.12.0	transitive	unknown
Removed	`jsesc`	2.5.2	transitive	unknown
Removed	`picocolors`	1.0.0	transitive	unknown
Removed	`to-fast-properties`	2.0.0	transitive	unknown

This check fails on vulnerabilities of high severity or higher. Change it in the repository's Security settings.

1 of 2 checks failed

1 failed, 1 passed · none are required, so none hold the merge

Workflows

Dependency review — 33 dependency changes, none vulnerableDetails

g1t / deploy — Deployment failedDetails

1 of 2 checks failed

1 failed, 1 passed · none are required, so none hold the merge

Workflows

Dependency review — 33 dependency changes, none vulnerableDetails

g1t / deploy — Deployment failedDetails

No reviews yet

Up to date with master