[Snyk] Upgrade: , bn.js, borsh, buffer, js-sha3, secp256k1, superstruct #10

nexisdev · 2024-09-08T08:46:26Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@babel/runtime
from 7.15.4 to 7.25.0 | 53 versions ahead of your current version | a month ago
on 2024-07-26
bn.js
from 5.2.0 to 5.2.1 | 1 version ahead of your current version | 2 years ago
on 2022-05-24
borsh
from 0.4.0 to 0.7.0 | 3 versions ahead of your current version | 3 years ago
on 2021-12-02
buffer
from 6.0.1 to 6.0.3 | 2 versions ahead of your current version | 4 years ago
on 2020-11-23
js-sha3
from 0.8.0 to 0.9.3 | 4 versions ahead of your current version | 9 months ago
on 2023-12-16
secp256k1
from 4.0.2 to 4.0.3 | 1 version ahead of your current version | 3 years ago
on 2022-01-08
superstruct
from 0.14.2 to 0.16.7 | 14 versions ahead of your current version | 2 years ago
on 2022-11-01

Release notes

Package name: @babel/runtime

7.25.0 - 2024-07-26
v7.25.0 (2024-07-26)

Thanks @ davidtaylorhq and @ slatereax for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

👓 Spec Compliance
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  - #16537 await using normative updates (@ JLHwung)
- babel-plugin-transform-typescript
  - #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@ liuxingbaoyu)
🚀 New Feature
- babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
  - #16658 Move ensureFunctionName to NodePath.prototype (@ nicolo-ribaudo)
- babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
  - #16644 Move hoistVariables to Scope.prototype (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
  - #16645 Move splitExportDeclaration to NodePath.prototype (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
  - #16649 Move environment-visitor helper into @ babel/traverse (@ nicolo-ribaudo)
- babel-core, babel-parser
  - #16480 Expose wether a module has TLA or not as .extra.async (@ nicolo-ribaudo)
- babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
  - #16569 Introduce bugfix-safari-class-field-initializer-scope (@ davidtaylorhq)
- babel-plugin-transform-block-scoping, babel-traverse, babel-types
  - #16551 Add NodePath#getAssignmentIdentifiers (@ JLHwung)
- babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules
  - #16579 Add uncheckedRequire option for JSON imports to CJS (@ nicolo-ribaudo)
- babel-helper-transform-fixture-test-runner, babel-node
  - #16642 Allow using custom config in babel-node --eval (@ slatereax)
- babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone
  - #16445 Add duplicate-named-capturing-groups-regex to preset-env (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16678 Print parens around as expressions on the LHS (@ nicolo-ribaudo)
- babel-template, babel-types
  - #15286 fix: Props are lost when the template replaces the node (@ liuxingbaoyu)
🏠 Internal
- Other
  - #16674 bump gulp to 5 (@ JLHwung)
- babel-generator
  - #16651 Simplify the printing logic for ( before ambiguous tokens (@ nicolo-ribaudo)
- babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse
  - #16652 Simplify helper-function-name logic (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-parser, babel-plugin-proposal-pipeline-operator
  - #16461 Some minor parser performance improvements for ts (@ liuxingbaoyu)
🔬 Output optimization
- babel-plugin-transform-classes
  - #16670 Reduce redundant assertThisInitialized (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-object-super, babel-plugin-transform-private-methods, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16374 Improve super.x output (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16656 Simplify output for anonymous classes with no methods (@ nicolo-ribaudo)
Committers: 6
- Artem (@ slatereax)
- Babel Bot (@ babel-bot)
- David Taylor (@ davidtaylorhq)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.8 - 2024-07-11
v7.24.8 (2024-07-11)

Thanks @ H0onnn, @ jkup and @ SreeXD for your first pull requests!

👓 Spec Compliance
- babel-parser
  - #16567 Do not use strict mode in TS declare (@ liuxingbaoyu)
🐛 Bug Fix
- babel-generator
  - #16630 Correctly print parens around in in for heads (@ nicolo-ribaudo)
  - #16626 Fix printing of comments in await using (@ nicolo-ribaudo)
  - #16591 fix typescript code generation for yield expression inside type expre… (@ SreeXD)
- babel-parser
  - #16613 Disallow destructuring assignment in using declarations (@ H0onnn)
  - #16490 fix: do not add .value: undefined to regexp literals (@ liuxingbaoyu)
- babel-types
  - #16615 Remove boolean props from ObjectTypeInternalSlot visitor keys (@ nicolo-ribaudo)
- babel-plugin-transform-typescript
  - #16566 fix: Correctly handle export import x = (@ liuxingbaoyu)
💅 Polish
- babel-generator
  - #16625 Avoid unnecessary parens around async in for await (@ nicolo-ribaudo)
- babel-traverse
  - #16619 Avoid checking Scope.globals multiple times (@ liuxingbaoyu)
Committers: 9
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Jon Kuperman (@ jkup)
- Nagendran N (@ SreeXD)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- @ H0onnn
- @ liuxingbaoyu
7.24.7 - 2024-06-05
v7.24.7 (2024-06-05)

🐛 Bug Fix
- babel-node
  - #16554 Allow extra flags in babel-node (@ nicolo-ribaudo)
- babel-traverse
  - #16522 fix: incorrect constantViolations with destructuring (@ liuxingbaoyu)
- babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  - #16524 fix: Transform using in switch correctly (@ liuxingbaoyu)
🏠 Internal
- babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16525 Delete unused array helpers (@ blakewilson)
Committers: 7
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- @ liuxingbaoyu
7.24.6 - 2024-05-24
v7.24.6 (2024-05-24)

Thanks @ amjed-98, @ blakewilson, @ coelhucas, and @ SukkaW for your first PRs!

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16514 Fix source maps for private member expressions (@ nicolo-ribaudo)
- babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  - #16515 Fix source maps for template literals (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16485 Support undecorated static accessor in anonymous classes (@ JLHwung)
  - #16484 Fix decorator bare yield await (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16483 Fix: throw TypeError if addInitializer is called after finished (@ JLHwung)
- babel-parser, babel-plugin-transform-typescript
  - #16476 fix: Correctly parse cls.fn<C> = x (@ liuxingbaoyu)
🏠 Internal
- babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16501 Generate helper metadata at build time (@ nicolo-ribaudo)
- babel-helpers
  - #16499 Add tsconfig.json for @ babel/helpers/src/helpers (@ nicolo-ribaudo)
- babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16495 Move all runtime helpers to individual files (@ nicolo-ribaudo)
- babel-parser, babel-traverse
  - #16482 Statically generate boilerplate for bitfield accessors (@ nicolo-ribaudo)
- Other
  - #16466 Migrate import assertions syntax (@ JLHwung)
Committers: 9
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Lucas Coelho (@ coelhucas)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- Zzzen (@ Zzzen)
- @ liuxingbaoyu
7.24.5 - 2024-04-29
v7.24.5 (2024-04-29)

Thanks @ romgrk and @ sossost for your first PRs!

🐛 Bug Fix
- babel-plugin-transform-classes, babel-traverse
  - #16377 fix: TypeScript annotation affects output (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  - #16440 Fix suppressed error order (@ sossost)
  - #16408 Await nullish async disposable (@ JLHwung)
💅 Polish
- babel-parser
  - #16407 Recover from exported using declaration (@ JLHwung)
🏠 Internal
- Other
  - #16414 Relax ESLint peerDependency constraint to allow v9 (@ liuxingbaoyu)
- babel-parser
  - #16425 Improve @ babel/parser AST types (@ nicolo-ribaudo)
  - #16417 Always pass type argument to .startNode (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  - #16439 Make NodePath<T | U> distributive (@ nicolo-ribaudo)
- babel-plugin-proposal-partial-application, babel-types
  - #16421 Remove JSXNamespacedName from valid CallExpression args (@ nicolo-ribaudo)
- babel-plugin-transform-class-properties, babel-preset-env
  - #16406 Do not load unnecessary Babel 7 syntax plugins in Babel 8 (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-helpers, babel-preset-env, babel-runtime-corejs3
  - #16357 Performance: improve objectWithoutPropertiesLoose on V8 (@ romgrk)
Committers: 6
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Rom Grk (@ romgrk)
- @ liuxingbaoyu
- ynnsuis (@ sossost)
7.24.4 - 2024-04-03
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.8 - 2024-01-08
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.4 - 2023-11-20
7.23.2 - 2023-10-11
7.23.1 - 2023-09-25
7.23.0 - 2023-09-25
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.3 - 2023-05-27
7.22.0 - 2023-05-26
7.21.5 - 2023-04-28
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.0 - 2023-02-20
7.20.13 - 2023-01-21
7.20.7 - 2022-12-22
7.20.6 - 2022-11-28
7.20.5 - 2022-11-28
7.20.1 - 2022-11-01
7.20.0 - 2022-10-27
7.19.4 - 2022-10-10
7.19.0 - 2022-09-05
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.3 - 2022-05-25
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.2 - 2022-02-08
7.17.0 - 2022-02-02
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.3 - 2021-11-09
7.16.0 - 2021-10-29
7.15.4 - 2021-09-02

from @babel/runtime GitHub release notes

Package name: bn.js

5.2.1 - 2022-05-24
- fix: serious issue in .toString(16) (#295)
5.2.0 - 2021-02-23
- fix: Buffer not using global in browser (#260)
- fix: LE constructor for HEX (#265)

from bn.js GitHub release notes

Package name: borsh

0.7.0 - 2021-12-02
Highlights:
- Added support for serialization/deserialization of maps
- TextDecoder does not rely on global anymore
- redundant files are not published to npm
Commits:
- build artifacts 3b9ceed
- pretty (#46) 8eeabaf
- Serialize and deserialize support for Map type. (#41) b80a6d4
- Change TextDecoder resolution to not rely on global (#40) 1eed6ae
- build: do not add source and tests to npm package (#37) 261d9cd
- Merge pull request #35 from near/formating-fix 2bbd16e
- tests fixed 226b6b8
- test action tets (broken tests) 2f2f0eb
- prettier fixed 0ceaf1d
- pretty test 2 5aabc06
- formating test 7feefc5
- Formatting fix dca02da
- Add Prettier to keep code consistent. (#33) 9ed926b
v0.6.0...v0.7.0
0.6.0 - 2021-08-18
Highlights:
- added ability to specify custom Reader/Writer
- deserialize now returns instance of classType
Commits:
v0.5.0...v0.6.0
0.5.0 - 2021-07-23
Highlights:
- Added support for fixed arrays
- Added ability to pass custom serialize/deserialize functions
Commits:
- add fixed array serialization/deserialization (#27) ebb340c
- call class serialize/deserialize methods (#20) 4d4bce3
- Merge pull request #18 from near/repo-update a69361d
- borsh repo updated in package.json 62c05ee
v0.4.0...v0.5.0
0.4.0 - 2021-05-05
writeU16, readU16, writeI256, readU256, writeU512, readU512 functions added
deserializeUnchecked function added for deserialization without the lengths check
writeU64 accepts number
writeI128 accepts number

0.3.1...0.4.0

from borsh GitHub release notes

Package name: buffer

6.0.3 - 2020-11-23
6.0.3
6.0.2 - 2020-11-09
6.0.2
6.0.1 - 2020-11-04
6.0.1

from buffer GitHub release notes

Package name: js-sha3

0.9.3 - 2023-12-16
No content.
0.9.2 - 2023-09-16
No content.
0.9.1 - 2023-08-31
No content.
0.9.0 - 2023-08-30
No content.
0.8.0 - 2018-08-05
No content.

from js-sha3 GitHub release notes

Package name: secp256k1

4.0.3 - 2022-01-08
- 95b6176 Update prebuildify (#187)
- 4223dd4 Update elliptic to 6.5.4 (CVE-2020-28498) (#186)
4.0.2 - 2020-07-20
- 466cb57 Support musl (#169)
- b6d21b9 Add in place functions to API.md (#168)

from secp256k1 GitHub release notes

Package name: superstruct

from superstruct GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/runtime from 7.15.4 to 7.25.0. See this package in npm: https://www.npmjs.com/package/@babel/runtime - bn.js from 5.2.0 to 5.2.1. See this package in npm: https://www.npmjs.com/package/bn.js - borsh from 0.4.0 to 0.7.0. See this package in npm: https://www.npmjs.com/package/borsh - buffer from 6.0.1 to 6.0.3. See this package in npm: https://www.npmjs.com/package/buffer - js-sha3 from 0.8.0 to 0.9.3. See this package in npm: https://www.npmjs.com/package/js-sha3 - secp256k1 from 4.0.2 to 4.0.3. See this package in npm: https://www.npmjs.com/package/secp256k1 - superstruct from 0.14.2 to 0.16.7. See this package in npm: https://www.npmjs.com/package/superstruct See this project in Snyk: https://app.snyk.io/org/nexisdev/project/0d3151ea-2e1d-4115-bb25-001e0add8222?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: , bn.js, borsh, buffer, js-sha3, secp256k1, superstruct #10

[Snyk] Upgrade: , bn.js, borsh, buffer, js-sha3, secp256k1, superstruct #10

nexisdev commented Sep 8, 2024

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 6

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

Committers: 7

v7.24.6 (2024-05-24)

🐛 Bug Fix

🏠 Internal

Committers: 9

v7.24.5 (2024-04-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 6

[Snyk] Upgrade: , bn.js, borsh, buffer, js-sha3, secp256k1, superstruct #10

Are you sure you want to change the base?

[Snyk] Upgrade: , bn.js, borsh, buffer, js-sha3, secp256k1, superstruct #10

Conversation

nexisdev commented Sep 8, 2024

Snyk has created this PR to upgrade multiple dependencies.

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 6

v7.24.8 (2024-07-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 9

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

Committers: 7

v7.24.6 (2024-05-24)

🐛 Bug Fix

🏠 Internal

Committers: 9

v7.24.5 (2024-04-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 6