Bump @babel/traverse, @redwoodjs/internal, @redwoodjs/prerender and @redwoodjs/structure in /packages/cli #15

dependabot · 2023-10-17T07:20:32Z

Bumps @babel/traverse to 7.23.2 and updates ancestor dependencies @babel/traverse, @redwoodjs/internal, @redwoodjs/prerender and @redwoodjs/structure. These dependencies need to be updated together.

Updates @babel/traverse from 7.15.0 to 7.23.2

Release notes

Sourced from @babel/traverse's releases.

v7.23.2 (2023-10-11)

NOTE: This release also re-publishes @babel/core, even if it does not appear in the linked release commit.

Thanks @jimmydief for your first PR!

🐛 Bug Fix

babel-traverse

#16033 Only evaluate own String/Number/Math methods (@nicolo-ribaudo)

babel-preset-typescript

#16022 Rewrite .tsx extension when using rewriteImportExtensions (@jimmydief)

babel-helpers

#16017 Fix: fallback to typeof when toString is applied to incompatible object (@JLHwung)

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16025 Avoid override mistake in namespace imports (@nicolo-ribaudo)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

James Diefenderfer (@jimmydief)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

v7.23.1 (2023-09-25)

Re-publishing @babel/helpers due to a publishing error in 7.23.0.

v7.23.0 (2023-09-25)

Thanks @lorenzoferre and @RajShukla1 for your first PRs!

🚀 New Feature

babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import

#15870 Support transforming import source for wasm (@nicolo-ribaudo)

babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

#15878 Implement import defer proposal transform support (@nicolo-ribaudo)

babel-generator, babel-parser, babel-types

#15845 Implement import defer parsing support (@nicolo-ribaudo)

#15829 Add parsing support for the "source phase imports" proposal (@nicolo-ribaudo)

babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types

#15682 Add createImportExpressions parser option (@JLHwung)

babel-standalone

#15671 Pass through nonce to the transformed script element (@JLHwung)

babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types

#15751 Add support for optional chain in assignments (@nicolo-ribaudo)

babel-helpers, babel-plugin-proposal-decorators

#15895 Implement the "decorator metadata" proposal (@nicolo-ribaudo)

babel-traverse, babel-types

#15893 Add t.buildUndefinedNode (@liuxingbaoyu)

babel-preset-typescript

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.23.2 (2023-10-11)

🐛 Bug Fix

babel-traverse

#16033 Only evaluate own String/Number/Math methods (@nicolo-ribaudo)

babel-preset-typescript

#16022 Rewrite .tsx extension when using rewriteImportExtensions (@jimmydief)

babel-helpers

#16017 Fix: fallback to typeof when toString is applied to incompatible object (@JLHwung)

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16025 Avoid override mistake in namespace imports (@nicolo-ribaudo)

v7.23.0 (2023-09-25)

🚀 New Feature

babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import

#15870 Support transforming import source for wasm (@nicolo-ribaudo)

babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

#15878 Implement import defer proposal transform support (@nicolo-ribaudo)

babel-generator, babel-parser, babel-types

#15845 Implement import defer parsing support (@nicolo-ribaudo)

#15829 Add parsing support for the "source phase imports" proposal (@nicolo-ribaudo)

babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types

#15682 Add createImportExpressions parser option (@JLHwung)

babel-standalone

#15671 Pass through nonce to the transformed script element (@JLHwung)

babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types

#15751 Add support for optional chain in assignments (@nicolo-ribaudo)

babel-helpers, babel-plugin-proposal-decorators

#15895 Implement the "decorator metadata" proposal (@nicolo-ribaudo)

babel-traverse, babel-types

#15893 Add t.buildUndefinedNode (@liuxingbaoyu)

babel-preset-typescript

#15913 Add rewriteImportExtensions option to TS preset (@nicolo-ribaudo)

babel-parser

#15896 Allow TS tuples to have both labeled and unlabeled elements (@yukukotani)

🐛 Bug Fix

babel-plugin-transform-block-scoping

#15962 fix: transform-block-scoping captures the variables of the method in the loop (@liuxingbaoyu)

💅 Polish

babel-traverse

#15797 Expand evaluation of global built-ins in @babel/traverse (@lorenzoferre)

babel-plugin-proposal-explicit-resource-management

#15985 Improve source maps for blocks with using declarations (@nicolo-ribaudo)

🔬 Output optimization

babel-core, babel-helper-module-transforms, babel-plugin-transform-async-to-generator, babel-plugin-transform-classes, babel-plugin-transform-dynamic-import, babel-plugin-transform-function-name, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-inline-elements, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env

#15984 Inline exports.XXX = update in simple variable declarations (@nicolo-ribaudo)

v7.22.20 (2023-09-16)

... (truncated)

Commits

b4b9942 v7.23.2
b13376b Only evaluate own String/Number/Math methods (#16033)
ca58ec1 v7.23.0
0f333da Add createImportExpressions parser option (#15682)
3744545 Fix linting
c7e6806 Add t.buildUndefinedNode (#15893)
38ee8b4 Expand evaluation of global built-ins in @babel/traverse (#15797)
9f3dfd9 v7.22.20
3ed28b2 Fully support || and && in pluginToggleBooleanFlag (#15961)
77b0d73 v7.22.19
Additional commits viewable in compare view

Updates @redwoodjs/internal from 0.36.2 to 6.3.2

Release notes

Sourced from @redwoodjs/internal's releases.

v6.3.2

Patch Release

This patch release includes a host of fixes, most notably for the api server. On larger projects (we've only come across one instance so far), in dev mode, there was a race condition between prebuilding and building the api side that sometimes caused the api server to loop. For now we've avoided this by ignoring an extraneous event emitted by chokidar, but in the future we'll consider fixing it in a more robust way by introducing api build caching.

What may be more relevant to most users, this patch release ships with a codemod to apply the type fix in #9251 to TS strict-mode projects: npx @redwoodjs/codemods entry-client-null-check.

Lastly, the postcss security release only affects @redwoodjs/studio, which is a dev-time only package, but if you're using tailwind or another CSS library that uses postcss, you'll want to upgrade it in your project accordingly.

fix(generate dbAuth): restore one-more-thing formatting #9247 by @Tobbe

fix: await Promise when seeding #9245 by @G-Rath

Include @types/react as devDep in projects #9250 by @Tobbe

fix(api-sever): stop infinite loop on large projects #9270 by @jtoar

small tweak to Flightcontrol deploy config template #9240 by @flybayer

fix(crwa): Explicit check for possible null value in entry.client.tsx #9251 by @Josh-Walker-GM

chore(deps): update dependency postcss to v8.4.31 [security] #9260

v6.3.1

Security Release: Redwood Dependency Vulnerabilities

Two of Redwood's dependencies, systeminformation and graphql, just released a security release; this patch includes the patched versions of both packages. Here are links to the CVEs for systeminformation and graphql respectively: GHSA-gx6r-qc2v-3p3v, https://nvd.nist.gov/vuln/detail/CVE-2023-26144.

fix(deps): update dependency systeminformation to v5.21.7 [security] #9218

fix(deps): update dependency graphql to v16.8.1 [security] #9228

v6.3.0

Changelog

Features

feat(cli): Setup command which uses an npm package #8920 by @Josh-Walker-GM

feat(mailer): Resend handler #9175 by @Josh-Walker-GM

Docs

Update what-is-redwood.md #9151 by @rodrigojmartin

Fixed broken link (404) in the cell tutorial #9176 by @sidshetty

Notes SDL codegen in docs #8917 by @orta

Update services.md #9189 by @papaponmx

docs(cli): Setup from npm package #9215 by @Josh-Walker-GM

Core dependencies

fix(deps): update prisma monorepo to v5.3.1 #9187

fix(deps): update dependency react-hook-form to v7.46.1 #9162

fix(deps): update dependency fastify to v4.23.2 #9184

fix(deps): update dependency @apollo/client to v3.8.4 #9208

fix(deps): update storybook monorepo to v7.4.3 #9211

Dependencies

... (truncated)

Commits

7e4bf2e v6.3.2
7a9296c v6.3.1
fe83c98 fix(deps): update dependency graphql to v16.8.1 [security] (#9228)
a2741d0 fix(deps): update dependency systeminformation to v5.21.7 [security] (#9218)
f58ad04 v6.3.0
76e8546 Merge branch 'release/patch/v6.2.3' into next
7390b25 v6.2.3
8075175 chore: bump babel packages' versions (#9200)
8ebbfb4 chore: bump babel packages' versions (#9200)
0551059 Merge branch 'release/patch/v6.2.2' into next
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by desaadi, a new releaser for @redwoodjs/internal since your current version.

Updates @redwoodjs/prerender from 0.36.4 to 6.3.2

Release notes

Sourced from @redwoodjs/prerender's releases.

v6.3.2

Patch Release

This patch release includes a host of fixes, most notably for the api server. On larger projects (we've only come across one instance so far), in dev mode, there was a race condition between prebuilding and building the api side that sometimes caused the api server to loop. For now we've avoided this by ignoring an extraneous event emitted by chokidar, but in the future we'll consider fixing it in a more robust way by introducing api build caching.

What may be more relevant to most users, this patch release ships with a codemod to apply the type fix in #9251 to TS strict-mode projects: npx @redwoodjs/codemods entry-client-null-check.

Lastly, the postcss security release only affects @redwoodjs/studio, which is a dev-time only package, but if you're using tailwind or another CSS library that uses postcss, you'll want to upgrade it in your project accordingly.

fix(generate dbAuth): restore one-more-thing formatting #9247 by @Tobbe

fix: await Promise when seeding #9245 by @G-Rath

Include @types/react as devDep in projects #9250 by @Tobbe

fix(api-sever): stop infinite loop on large projects #9270 by @jtoar

small tweak to Flightcontrol deploy config template #9240 by @flybayer

fix(crwa): Explicit check for possible null value in entry.client.tsx #9251 by @Josh-Walker-GM

chore(deps): update dependency postcss to v8.4.31 [security] #9260

v6.3.1

Security Release: Redwood Dependency Vulnerabilities

Two of Redwood's dependencies, systeminformation and graphql, just released a security release; this patch includes the patched versions of both packages. Here are links to the CVEs for systeminformation and graphql respectively: GHSA-gx6r-qc2v-3p3v, https://nvd.nist.gov/vuln/detail/CVE-2023-26144.

fix(deps): update dependency systeminformation to v5.21.7 [security] #9218

fix(deps): update dependency graphql to v16.8.1 [security] #9228

v6.3.0

Changelog

Features

feat(cli): Setup command which uses an npm package #8920 by @Josh-Walker-GM

feat(mailer): Resend handler #9175 by @Josh-Walker-GM

Docs

Update what-is-redwood.md #9151 by @rodrigojmartin

Fixed broken link (404) in the cell tutorial #9176 by @sidshetty

Notes SDL codegen in docs #8917 by @orta

Update services.md #9189 by @papaponmx

docs(cli): Setup from npm package #9215 by @Josh-Walker-GM

Core dependencies

fix(deps): update prisma monorepo to v5.3.1 #9187

fix(deps): update dependency react-hook-form to v7.46.1 #9162

fix(deps): update dependency fastify to v4.23.2 #9184

fix(deps): update dependency @apollo/client to v3.8.4 #9208

fix(deps): update storybook monorepo to v7.4.3 #9211

Dependencies

... (truncated)

Commits

7e4bf2e v6.3.2
7a9296c v6.3.1
fe83c98 fix(deps): update dependency graphql to v16.8.1 [security] (#9228)
f58ad04 v6.3.0
76e8546 Merge branch 'release/patch/v6.2.3' into next
7390b25 v6.2.3
8075175 chore: bump babel packages' versions (#9200)
8ebbfb4 chore: bump babel packages' versions (#9200)
0551059 Merge branch 'release/patch/v6.2.2' into next
b1fea35 v6.2.2
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by desaadi, a new releaser for @redwoodjs/prerender since your current version.

Updates @redwoodjs/structure from 0.36.2 to 6.3.2

Release notes

Sourced from @redwoodjs/structure's releases.

v6.3.2

Patch Release

This patch release includes a host of fixes, most notably for the api server. On larger projects (we've only come across one instance so far), in dev mode, there was a race condition between prebuilding and building the api side that sometimes caused the api server to loop. For now we've avoided this by ignoring an extraneous event emitted by chokidar, but in the future we'll consider fixing it in a more robust way by introducing api build caching.

What may be more relevant to most users, this patch release ships with a codemod to apply the type fix in #9251 to TS strict-mode projects: npx @redwoodjs/codemods entry-client-null-check.

Lastly, the postcss security release only affects @redwoodjs/studio, which is a dev-time only package, but if you're using tailwind or another CSS library that uses postcss, you'll want to upgrade it in your project accordingly.

fix(generate dbAuth): restore one-more-thing formatting #9247 by @Tobbe

fix: await Promise when seeding #9245 by @G-Rath

Include @types/react as devDep in projects #9250 by @Tobbe

fix(api-sever): stop infinite loop on large projects #9270 by @jtoar

small tweak to Flightcontrol deploy config template #9240 by @flybayer

fix(crwa): Explicit check for possible null value in entry.client.tsx #9251 by @Josh-Walker-GM

chore(deps): update dependency postcss to v8.4.31 [security] #9260

v6.3.1

Security Release: Redwood Dependency Vulnerabilities

Two of Redwood's dependencies, systeminformation and graphql, just released a security release; this patch includes the patched versions of both packages. Here are links to the CVEs for systeminformation and graphql respectively: GHSA-gx6r-qc2v-3p3v, https://nvd.nist.gov/vuln/detail/CVE-2023-26144.

fix(deps): update dependency systeminformation to v5.21.7 [security] #9218

fix(deps): update dependency graphql to v16.8.1 [security] #9228

v6.3.0

Changelog

Features

feat(cli): Setup command which uses an npm package #8920 by @Josh-Walker-GM

feat(mailer): Resend handler #9175 by @Josh-Walker-GM

Docs

Update what-is-redwood.md #9151 by @rodrigojmartin

Fixed broken link (404) in the cell tutorial #9176 by @sidshetty

Notes SDL codegen in docs #8917 by @orta

Update services.md #9189 by @papaponmx

docs(cli): Setup from npm package #9215 by @Josh-Walker-GM

Core dependencies

fix(deps): update prisma monorepo to v5.3.1 #9187

fix(deps): update dependency react-hook-form to v7.46.1 #9162

fix(deps): update dependency fastify to v4.23.2 #9184

fix(deps): update dependency @apollo/client to v3.8.4 #9208

fix(deps): update storybook monorepo to v7.4.3 #9211

Dependencies

... (truncated)

Commits

7e4bf2e v6.3.2
7a9296c v6.3.1
fe83c98 fix(deps): update dependency graphql to v16.8.1 [security] (#9228)
f58ad04 v6.3.0
76e8546 Merge branch 'release/patch/v6.2.3' into next
7390b25 v6.2.3
8075175 chore: bump babel packages' versions (#9200)
8ebbfb4 chore: bump babel packages' versions (#9200)
5195668 fix(deps): update prisma monorepo to v5.3.1 (#9187)
0551059 Merge branch 'release/patch/v6.2.2' into next
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by desaadi, a new releaser for @redwoodjs/structure since your current version.

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot bot added the dependencies Pull requests that update a dependency file label Oct 17, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump @babel/traverse, @redwoodjs/internal, @redwoodjs/prerender and @redwoodjs/structure in /packages/cli #15

Bump @babel/traverse, @redwoodjs/internal, @redwoodjs/prerender and @redwoodjs/structure in /packages/cli #15

Uh oh!

dependabot bot commented on behalf of github Oct 17, 2023 •

edited

Loading

Uh oh!

Uh oh!

Bump @babel/traverse, @redwoodjs/internal, @redwoodjs/prerender and @redwoodjs/structure in /packages/cli #15

Are you sure you want to change the base?

Bump @babel/traverse, @redwoodjs/internal, @redwoodjs/prerender and @redwoodjs/structure in /packages/cli #15

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 17, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.23.2 (2023-10-11)

🐛 Bug Fix

Committers: 5

v7.23.1 (2023-09-25)

v7.23.0 (2023-09-25)

🚀 New Feature

v7.23.2 (2023-10-11)

🐛 Bug Fix

v7.23.0 (2023-09-25)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🔬 Output optimization

v7.22.20 (2023-09-16)

v6.3.2

Patch Release

v6.3.1

Security Release: Redwood Dependency Vulnerabilities

v6.3.0

Changelog

Features

Docs

Core dependencies

Dependencies

v6.3.2

Patch Release

v6.3.1

Security Release: Redwood Dependency Vulnerabilities

v6.3.0

Changelog

Features

Docs

Core dependencies

Dependencies

v6.3.2

Patch Release

v6.3.1

Security Release: Redwood Dependency Vulnerabilities

v6.3.0

Changelog

Features

Docs

Core dependencies

Dependencies

Uh oh!

Uh oh!

dependabot bot commented on behalf of github Oct 17, 2023 •

edited

Loading