Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade acorn from 8.11.3 to 8.12.0 #15031

Closed
wants to merge 1 commit into from

Conversation

snipe
Copy link
Owner

@snipe snipe commented Jul 5, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade acorn from 8.11.3 to 8.12.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released on 21 days ago.

Release notes
Package name: acorn
  • 8.12.0 - 2024-06-14

    New features

    Support ES2025 duplicate capture group names in regular expressions.

    Bug fixes

    Include VariableDeclarator in the AnyNode type so that walker objects can refer to it without getting a type error.

    Properly raise a parse error for invalid for/of statements using async as binding name.

    Properly recognize "use strict" when preceded by a string with an escaped newline.

    Mark the Parser constructor as protected, not private, so plugins can extend it without type errors.

    Fix a bug where some invalid delete expressions were let through when the operand was parenthesized and preserveParens was enabled.

    Properly normalize line endings in raw strings of invalid template tokens.

    Properly track line numbers for escaped newlines in strings.

    Fix a bug that broke line number accounting after a template literal with invalid escape sequences.

  • 8.11.3 - 2023-12-29

    Bug fixes

    Add Function and Class to the AggregateType type, so that they can be used in walkers without raising a type error.

    Make sure onToken get an import keyword token when parsing import.meta.

    Fix a bug where .loc.start could be undefined for new.target meta nodes.

from acorn GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade acorn from 8.11.3 to 8.12.0.

See this package in npm:
acorn

See this project in Snyk:
https://app.snyk.io/org/snipe/project/3d53e1dd-b8bf-46b5-ba61-18ce26933166?utm_source=github&utm_medium=referral&page=upgrade-pr
@probot-autolabeler probot-autolabeler bot added dependencies Pull requests that update a dependency file javascript labels Jul 5, 2024
Copy link

what-the-diff bot commented Jul 5, 2024

PR Summary

  • Updated Project Identifier
    The field name in package-lock.json, which serves as an identifier for the project, was updated from "snipe-it" to "relock-npm-lock-v2-APPG6R".

  • Upgraded Acorn Version
    The version of acorn, a JavaScript parser used in our project, was upgraded to "^8.12.0" in both package-lock.json and package.json files. This could provide better compatibility and stability in our project.

  • Enhanced Acorn's Integrity and Resolution
    Extra information about the source (via resolved field) and verification data (via integrity field) for acorn was added in package-lock.json. This could enhance the reliability and traceability of the software dependencies.

@snipe snipe closed this Jul 8, 2024
@snipe snipe deleted the snyk-upgrade-29147dcaffa1a2be5d988a3150471707 branch January 17, 2025 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants