Skip to content

devDeps: reapply babel 7 upgrade#34

Merged
legobeat merged 3 commits intoMetaMask:mainfrom
legobeat:reapply-babel-7
Dec 19, 2023
Merged

devDeps: reapply babel 7 upgrade#34
legobeat merged 3 commits intoMetaMask:mainfrom
legobeat:reapply-babel-7

Conversation

@legobeat
Copy link
Copy Markdown

@legobeat legobeat commented Nov 22, 2023 •
edited
Loading

Blocking

Blocked by

@socket-security
Copy link
Copy Markdown

socket-security bot commented Nov 22, 2023 •
edited
Loading

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
@babel/plugin-transform-unicode-regex 7.23.3 filesystem, shell, environment +61 10.9 MB nicolo-ribaudo
@babel/plugin-transform-sticky-regex 7.23.3 filesystem, shell, environment +52 10.7 MB nicolo-ribaudo
@babel/plugin-transform-property-literals 7.23.3 filesystem, shell, environment +52 10.7 MB nicolo-ribaudo
@babel/plugin-transform-member-expression-literals 7.23.3 filesystem, shell, environment +52 10.7 MB nicolo-ribaudo
@babel/plugin-transform-arrow-functions 7.23.3 filesystem, shell, environment +52 10.7 MB nicolo-ribaudo
@babel/plugin-transform-literals 7.23.3 filesystem, shell, environment +52 10.7 MB nicolo-ribaudo
@babel/plugin-transform-function-name 7.23.3 filesystem, shell, environment +52 10.7 MB nicolo-ribaudo
@babel/plugin-transform-block-scoped-functions 7.23.3 filesystem, shell, environment +52 10.7 MB nicolo-ribaudo
@babel/plugin-transform-shorthand-properties 7.23.3 filesystem, shell, environment +52 10.7 MB nicolo-ribaudo
@babel/plugin-transform-object-super 7.23.3 filesystem, shell, environment +55 10.8 MB nicolo-ribaudo
@babel/register 7.22.15 filesystem, shell, environment +64 11 MB nicolo-ribaudo
@babel/plugin-transform-template-literals 7.23.3 filesystem, shell, environment +52 10.8 MB nicolo-ribaudo
@babel/plugin-transform-spread 7.23.3 filesystem, shell, environment +53 10.8 MB nicolo-ribaudo
@babel/plugin-transform-computed-properties 7.23.3 filesystem, shell, environment +52 10.8 MB nicolo-ribaudo
@babel/plugin-transform-modules-commonjs 7.23.3 filesystem, shell, environment +52 10.8 MB nicolo-ribaudo
@babel/cli 7.23.4 eval, filesystem, shell +56 11.8 MB nicolo-ribaudo
@babel/plugin-transform-object-rest-spread 7.23.4 filesystem, shell, environment +54 10.9 MB nicolo-ribaudo
@babel/plugin-transform-parameters 7.23.3 filesystem, shell, environment +52 10.8 MB nicolo-ribaudo
@babel/plugin-transform-destructuring 7.23.3 filesystem, shell, environment +52 10.8 MB nicolo-ribaudo
@babel/plugin-transform-for-of 7.23.6 filesystem, shell, environment +53 10.8 MB nicolo-ribaudo
@babel/plugin-transform-classes 7.23.5 filesystem, shell, environment +56 10.9 MB nicolo-ribaudo
@babel/plugin-transform-block-scoping 7.23.4 filesystem, shell, environment +52 10.8 MB nicolo-ribaudo
@babel/core 7.23.6 filesystem, shell, environment +50 10.7 MB nicolo-ribaudo
@babel/runtime 7.23.6 None +1 273 kB nicolo-ribaudo
@babel/eslint-parser 7.23.3 shell +107 20.9 MB nicolo-ribaudo
rimraf 2.3.4...3.0.2 None +0/-2 17.3 kB isaacs
eslint-import-resolver-webpack 0.2.4...0.2.5 network +116/-62 17.9 MB benmosher
pre-commit 1.1.3...1.2.2 None +1/-3 45.5 kB 3rdeden
mocha 5.2.0...7.2.0 None +95/-7 5.34 MB craigtaub
eslint-config-airbnb 9.0.1...17.1.1 network +151/-65 22.9 MB ljharb
bignumber.js 3.0.1...9.1.2 None +0/-0 351 kB mikemcl
eslint-plugin-jsx-a11y 1.2.0...6.8.0 network +131/-0 19.9 MB ljharb
chai 3.5.0...4.3.10 None +6/-3 916 kB keithamus
eslint-plugin-import 1.8.0...2.29.1 network +115/-61 17.9 MB ljharb
eslint-plugin-react 5.1.1...7.33.2 network +129/-0 18.1 MB ljharb
eslint 2.10.1...5.16.0 network +58/-49 13.3 MB eslint
babel-loader 6.2.8...8.3.0 None +63/-59 11 MB nicolo-ribaudo

🚮 Removed packages: babel-cli@6.18.0, babel-core@6.18.2, babel-eslint@7.1.0, babel-plugin-check-es2015-constants@6.8.0, babel-plugin-transform-es2015-arrow-functions@6.8.0, babel-plugin-transform-es2015-block-scoped-functions@6.8.0, babel-plugin-transform-es2015-block-scoping@6.18.0, babel-plugin-transform-es2015-classes@6.18.0, babel-plugin-transform-es2015-computed-properties@6.8.0, babel-plugin-transform-es2015-destructuring@6.19.0, babel-plugin-transform-es2015-for-of@6.18.0, babel-plugin-transform-es2015-function-name@6.9.0, babel-plugin-transform-es2015-literals@6.8.0, babel-plugin-transform-es2015-modules-commonjs@6.18.0, babel-plugin-transform-es2015-object-super@6.8.0, babel-plugin-transform-es2015-parameters@6.18.0, babel-plugin-transform-es2015-shorthand-properties@6.18.0, babel-plugin-transform-es2015-spread@6.8.0, babel-plugin-transform-es2015-sticky-regex@6.8.0, babel-plugin-transform-es2015-template-literals@6.8.0, babel-plugin-transform-es2015-unicode-regex@6.11.0, babel-plugin-transform-es3-member-expression-literals@6.5.0, babel-plugin-transform-es3-property-literals@6.5.0, babel-plugin-transform-object-rest-spread@6.19.0, babel-register@6.18.0, lint-staged@1.0.1

@socket-security
Copy link
Copy Markdown

socket-security bot commented Nov 22, 2023 •
edited
Loading

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: debug@3.2.6, @nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1, eslint-module-utils@2.8.0, for-each@0.3.3, pathval@1.1.1, is-async-function@2.0.0, anymatch@3.1.3, convert-source-map@2.0.0, unicode-canonical-property-names-ecmascript@2.0.0, unicode-match-property-ecmascript@2.0.0, loupe@2.3.7, ms@2.1.2, check-error@1.0.3, fsevents@2.1.3, flat@4.1.1, update-browserslist-db@1.0.13, rxjs@6.6.7, semver@6.3.1

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

This was referenced Nov 22, 2023
Merged
Merged
Merged
@legobeat
Copy link
Copy Markdown
Author

legobeat commented Nov 27, 2023 

@SocketSecurity ignore update-browserslist-db@1.0.13

shell access ok

@legobeat
Copy link
Copy Markdown
Author

legobeat commented Nov 27, 2023 

@SocketSecurity ignore rxjs@6.6.7

network access ok

@legobeat
Copy link
Copy Markdown
Author

legobeat commented Nov 27, 2023 

@SocketSecurity ignore @nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1
@SocketSecurity ignore eslint-module-utils@2.8.0
@SocketSecurity ignore for-each@0.3.3
@SocketSecurity ignore pathval@1.1.1
@SocketSecurity ignore is-async-function@2.0.0
@SocketSecurity ignore anymatch@3.1.3
@SocketSecurity ignore convert-source-map@2.0.0
@SocketSecurity ignore unicode-canonical-property-names-ecmascript@2.0.0
@SocketSecurity ignore unicode-match-property-ecmascript@2.0.0
@SocketSecurity ignore loupe@2.3.7
@SocketSecurity ignore ms@2.1.2
@SocketSecurity ignore check-error@1.0.3

new author, no readme ok

@legobeat
Copy link
Copy Markdown
Author

legobeat commented Nov 27, 2023 

@SocketSecurity ignore debug@3.2.6
@SocketSecurity ignore fsevents@2.1.3
@SocketSecurity ignore flat@4.1.1

legacy via mocha

@legobeat
Copy link
Copy Markdown
Author

legobeat commented Nov 27, 2023 

@SocketSecurity ignore semver@6.3.1

bin script confusion ok; semver@^5.5.1 still pulled in via eslint; upgraded to v6 in eslint@6.1.0.

@legobeat legobeat marked this pull request as ready for review November 27, 2023 03:07
@legobeat legobeat requested review from a team, Mrtenz, NEllusion, kumavis and naugtur November 27, 2023 03:07
@legobeat legobeat merged commit f2681c1 into MetaMask:main Dec 19, 2023
@legobeat legobeat mentioned this pull request Jan 23, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kumavis kumavis kumavis approved these changes

@naugtur naugtur Awaiting requested review from naugtur

@Mrtenz Mrtenz Awaiting requested review from Mrtenz

@NEllusion NEllusion Awaiting requested review from NEllusion

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@legobeat @kumavis