[Snyk] Upgrade @babel/traverse from 7.1.4 to 7.26.5

[Mhmonicox]

Snyk has created this PR to upgrade @babel/traverse from 7.1.4 to 7.26.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 135 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	786	Proof of Concept
	Code Injection SNYK-JS-LODASH-1040724	786	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-450202	786	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	786	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-608086	786	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-6139239	786	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	786	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	786	Proof of Concept

Release notes

Package name: @babel/traverse

• 7.26.5 - 2025-01-10
  

  v7.26.5 (2025-01-10)

  👓 Spec Compliance

  • babel-parser
    • #17011 Allow the dynamic import.defer() form of import defer (@ babel-bot)

  🐛 Bug Fix

  • babel-plugin-transform-block-scoped-functions
    • #17024 chore: Avoid calling isInStrictMode in Babel 7 (@ liuxingbaoyu)
  • babel-plugin-transform-typescript
    • #17026 fix: Correctly generate exported const enums in namespace (@ liuxingbaoyu)
  • babel-parser
    • #17045 [estree] Unify method type parameters handling (@ JLHwung)
    • #17013 fix: Correctly set position for @(a.b)() (@ liuxingbaoyu)
    • #16996 [estree] Adjust the start loc of class methods with type params (@ nicolo-ribaudo)
  • babel-generator, babel-parser, babel-plugin-transform-flow-strip-types, babel-types
    • #17028 Support flow jsx opening element type arguments (@ JLHwung)
  • babel-compat-data, babel-preset-env
    • #17031 fix: More accurate transform-typeof-symbol compat data (@ liuxingbaoyu)
  • babel-generator, babel-parser, babel-types
    • #17019 Fix incomplete visitor keys (@ JLHwung)

  🔬 Output optimization

  • babel-plugin-transform-nullish-coalescing-operator
    • #16612 Improve nullish coalescing operator output (@ liuxingbaoyu)

  Committers: 5

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • @ liuxingbaoyu
  • fisker Cheung (@ fisker)
• 7.26.4 - 2024-12-05
  

  v7.26.4 (2024-12-05)

  ↩️ Revert

  • babel-traverse
    • #17005 Revert "perf: Improve scope information collection performance" (@ JLHwung)

  Committers: 2

  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
• 7.26.3 - 2024-12-04
  

  v7.26.3 (2024-12-04)

  🐛 Bug Fix

  • babel-generator
    • #16958 [preserveFormat] force semicolons when invalidating ASI (@ nicolo-ribaudo)

  🏠 Internal

  • babel-helper-builder-binary-assignment-operator-visitor, babel-plugin-transform-exponentiation-operator
    • #16895 Remove helper-builder-binary-assignment-operator-visitor (@ nicolo-ribaudo)

  🏃‍♀️ Performance

  • babel-generator
    • #16959 perf: Reduce the use of temporary objects (@ liuxingbaoyu)
  • babel-traverse
    • #16923 perf: Improve scope information collection performance (@ liuxingbaoyu)
    • #16964 perf: Avoid repeated traversal when creating scope (@ liuxingbaoyu)
  • babel-plugin-transform-modules-commonjs
    • #16954 perf: Remove use of simplifyAccess (@ liuxingbaoyu)

  Committers: 4

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • @ liuxingbaoyu
• 7.25.9 - 2024-10-22
  

  v7.25.9 (2024-10-22)

  Thanks @ victorenator for your first PR!

  🐛 Bug Fix

  • babel-parser, babel-template, babel-types
    • #16905 fix: Keep type annotations in syntacticPlaceholders mode (@ liuxingbaoyu)
  • babel-helper-compilation-targets, babel-preset-env
    • #16907 fix: support BROWSERSLIST{,_CONFIG} env (@ JLHwung)
  • Other
    • #16884 Analyze ClassAccessorProperty to prevent the no-undef rule (@ victorenator)

  🏠 Internal

  • babel-helper-transform-fixture-test-runner
    • #16914 remove test options flaky (@ JLHwung)
  • Every package
    • #16917 fix: Accidentally published tsconfig files (@ liuxingbaoyu)

  🏃‍♀️ Performance

  • babel-parser, babel-types
    • #16918 perf: Make VISITOR_KEYS etc. faster to access (@ liuxingbaoyu)

  Committers: 4

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Viktar Vaŭčkievič (@ victorenator)
  • @ liuxingbaoyu
• 7.25.7 - 2024-10-02
• 7.25.6 - 2024-08-29
• 7.25.4 - 2024-08-22
• 7.25.3 - 2024-07-31
• 7.25.2 - 2024-07-30
• 7.25.1 - 2024-07-28
• 7.25.0 - 2024-07-26
• 7.24.8 - 2024-07-11
• 7.24.7 - 2024-06-05
• 7.24.6 - 2024-05-24
• 7.24.5 - 2024-04-29
• 7.24.1 - 2024-03-19
• 7.24.0 - 2024-02-28
• 7.23.9 - 2024-01-25
• 7.23.7 - 2023-12-29
• 7.23.6 - 2023-12-11
• 7.23.5 - 2023-11-29
• 7.23.4 - 2023-11-20
• 7.23.3 - 2023-11-09
• 7.23.2 - 2023-10-11
• 7.23.0 - 2023-09-25
• 7.22.20 - 2023-09-16
• 7.22.19 - 2023-09-14
• 7.22.18 - 2023-09-14
• 7.22.17 - 2023-09-08
• 7.22.15 - 2023-09-04
• 7.22.11 - 2023-08-24
• 7.22.10 - 2023-08-07
• 7.22.8 - 2023-07-06
• 7.22.7 - 2023-07-06
• 7.22.6 - 2023-07-04
• 7.22.5 - 2023-06-08
• 7.22.4 - 2023-05-29
• 7.22.1 - 2023-05-26
• 7.22.0 - 2023-05-26
• 7.21.5 - 2023-04-28
• 7.21.4 - 2023-03-31
• 7.21.4-esm.4 - 2023-04-04
• 7.21.4-esm.3 - 2023-04-04
• 7.21.4-esm.2 - 2023-04-04
• 7.21.4-esm.1 - 2023-04-04
• 7.21.4-esm - 2023-04-04
• 7.21.3 - 2023-03-14
• 7.21.2 - 2023-02-23
• 7.21.0 - 2023-02-20
• 7.20.13 - 2023-01-21
• 7.20.12 - 2023-01-04
• 7.20.10 - 2022-12-23
• 7.20.8 - 2022-12-22
• 7.20.7 - 2022-12-22
• 7.20.5 - 2022-11-28
• 7.20.1 - 2022-11-01
• 7.20.0 - 2022-10-27
• 7.19.6 - 2022-10-20
• 7.19.4 - 2022-10-10
• 7.19.3 - 2022-09-27
• 7.19.1 - 2022-09-14
• 7.19.0 - 2022-09-05
• 7.18.13 - 2022-08-22
• 7.18.11 - 2022-08-04
• 7.18.10 - 2022-08-01
• 7.18.9 - 2022-07-18
• 7.18.8 - 2022-07-08
• 7.18.6 - 2022-06-27
• 7.18.5 - 2022-06-13
• 7.18.2 - 2022-05-25
• 7.18.0 - 2022-05-19
• 7.17.12 - 2022-05-16
• 7.17.10 - 2022-04-29
• 7.17.9 - 2022-04-06
• 7.17.3 - 2022-02-15
• 7.17.0 - 2022-02-02
• 7.16.10 - 2022-01-19
• 7.16.8 - 2022-01-10
• 7.16.7 - 2021-12-31
• 7.16.5 - 2021-12-13
• 7.16.3 - 2021-11-09
• 7.16.0 - 2021-10-29
• 7.15.4 - 2021-09-02
• 7.15.0 - 2021-08-04
• 7.14.9 - 2021-08-01
• 7.14.8 - 2021-07-20
• 7.14.7 - 2021-06-21
• 7.14.5 - 2021-06-09
• 7.14.2 - 2021-05-12
• 7.14.0 - 2021-04-29
• 7.13.17 - 2021-04-20
• 7.13.15 - 2021-04-08
• 7.13.13 - 2021-03-26
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.13 - 2021-02-03
• 7.12.12 - 2020-12-23
• 7.12.10 - 2020-12-09
• 7.12.9 - 2020-11-24
• 7.12.8 - 2020-11-23
• 7.12.7 - 2020-11-20
• 7.12.5 - 2020-11-03
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.5 - 2020-08-31
• 7.11.0 - 2020-07-30
• 7.10.5 - 2020-07-14
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.5 - 2020-04-07
• 7.9.0 - 2020-03-20
• 7.8.6 - 2020-02-27
• 7.8.4 - 2020-01-30
• 7.8.3 - 2020-01-13
• 7.8.0 - 2020-01-12
• 7.7.4 - 2019-11-22
• 7.7.2 - 2019-11-06
• 7.7.0 - 2019-11-05
• 7.6.3 - 2019-10-08
• 7.6.2 - 2019-09-23
• 7.6.0 - 2019-09-06
• 7.5.5 - 2019-07-17
• 7.5.0 - 2019-07-04
• 7.4.5 - 2019-05-21
• 7.4.4 - 2019-04-26
• 7.4.3 - 2019-04-02
• 7.4.0 - 2019-03-19
• 7.3.4 - 2019-02-25
• 7.2.3 - 2018-12-20
• 7.2.2 - 2018-12-15
• 7.1.6 - 2018-11-13
• 7.1.5 - 2018-11-06
• 7.1.4 - 2018-10-11

from @babel/traverse GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs