Skip to content
This repository has been archived by the owner on Apr 25, 2023. It is now read-only.

build(deps): bump sucrase from 3.20.3 to 3.32.0 in /storybook #248

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 10, 2023

Bumps sucrase from 3.20.3 to 3.32.0.

Changelog

Sourced from sucrase's changelog.

3.32.0 (2023-04-08)

  • Improve source map quality by adding column information. This fixes several source map use cases, such as Jest inline snapshots, source map composition, and some debugger features. (#759) (Emily Marigold Klassen)
    • Unfortunately, this change comes at some performance cost. Previously, the slowdown from enabling source maps was about 10%, and now it is about 30%. In most cases, the more detailed source maps are probably still preferable, so for configuration simplicity, there is currently no option to switch back to source maps without column information. If you would like to still use the faster but less accurate implementation, feel free to file an issue to request a new config option, or create the source map yourself in wrapper code by copying the original simple implementation.

3.31.0 (2023-03-26)

  • Add option to recognize and preserve JSX syntax. (#788)
  • Fix default export interop behavior when using transpiled dynamic import() to import a plain CJS module. For example, if foo.js has module.exports = 1;, then await import('foo.js') will now evaluate to {default: 1} rather than just 1. Named exports behave the same as before. This change matches the behavior of Node.js and other transpilers, so it is considered a bug fix rather than breaking. If you relied on the old behavior, feel free to file an issue and it may be possible to roll back until the next semver-major release. (#789, #790)

3.30.0 (2023-03-20)

  • Add support for new syntax in TypeScript 5.0:
    • export type *. (#786)
    • const on type parameters. (#786)
  • Implement parsing for several ES proposals. These are preserved in the output code, not transformed.
    • Import reflection: import module. (#785)
    • Explicit resource management: using. (#785)
    • Decorator after export keyword: export @foo class .... (#786)
  • Fix parsing of << within a type. (#769)

3.29.0 (2022-11-16)

  • Add support for the TypeScript 4.9 satisfies operator. (#766)

3.28.0 (2022-10-05)

  • Add ts-node transpiler plugin, available as sucrase/ts-node-plugin. This makes it possible to use Sucrase with all ts-node features such as an ESM loader, a REPL, and configuration via tsconfig.json. (#729)

3.27.0 (2022-09-15)

  • Add support for assert {type: 'json'} in import statements. (#746)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sucrase](https://github.com/alangpierce/sucrase) from 3.20.3 to 3.32.0.
- [Release notes](https://github.com/alangpierce/sucrase/releases)
- [Changelog](https://github.com/alangpierce/sucrase/blob/main/CHANGELOG.md)
- [Commits](https://github.com/alangpierce/sucrase/commits)

---
updated-dependencies:
- dependency-name: sucrase
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 10, 2023
@ImagineBuildBot
Copy link

Scan submitted to Checkmarx

@ImagineBuildBot
Copy link

Logo
Checkmarx SAST - Scan Summary & Details

Cx-SAST Summary

Total of 81 vulnerabilities
High 18 High
Medium 5 Medium
Low 58 Low
Info 0 Info

Checkmarx Scan Summary

Severity Count
High 18
Medium 5
Low 58
Informational 0

Violation Summary

High 17 High
Low 54 Low
Medium 4 Medium

View more details on Checkmarx UI

Cx-SAST Details

Lines Severity Category File Link
102 Medium Missing_HSTS_Header packages/backend-common/src/middleware/errorHandler.ts Checkmarx
104 Medium Client_ReDoS_From_Regex_Injection plugins/catalog-backend-module-github/src/GithubDiscoveryProcessor.ts Checkmarx
168 Medium Client_Privacy_Violation packages/integration/src/bitbucket/core.ts Checkmarx
149 Medium Client_HTML5_Store_Sensitive_data_In_Web_Storage packages/core-app-api/src/lib/AuthSessionManager/AuthSessionStore.ts Checkmarx
156 Low Use_of_Broken_or_Risky_Cryptographic_Algorithm packages/cli/config/jest.js Checkmarx
57 Low Unsafe_Use_Of_Target_blank plugins/git-release-manager/src/features/Info/Info.tsx Checkmarx
138 Low Unsafe_Use_Of_Target_blank plugins/cloudbuild/src/components/WorkflowRunDetails/WorkflowRunDetails.tsx Checkmarx
76 Low Unsafe_Use_Of_Target_blank plugins/ilert/src/components/ILertCard/ILertCardEmptyState.tsx Checkmarx
45 Low Unsafe_Use_Of_Target_blank plugins/catalog-import/src/components/StepFinishImportLocation/StepFinishImportLocation.tsx Checkmarx
80 93 Low Unsafe_Use_Of_Target_blank plugins/bitrise/src/components/BitriseBuildsTableComponent/BitriseBuildsTableComponent.tsx Checkmarx
53 Low Unsafe_Use_Of_Target_blank plugins/todo/src/components/TodoList/TodoList.tsx Checkmarx
105 117 Low Unsafe_Use_Of_Target_blank plugins/jenkins/src/components/BuildWithStepsPage/BuildWithStepsPage.tsx Checkmarx
114 Low Unsafe_Use_Of_Target_blank plugins/lighthouse/src/components/Intro/index.tsx Checkmarx
115 Low Unsafe_Use_Of_Target_blank plugins/bazaar/src/components/CardContentFields/CardContentFields.tsx Checkmarx
81 96 Low Unsafe_Use_Of_Target_blank plugins/gcalendar/src/components/CalendarCard/CalendarEventPopoverContent.tsx Checkmarx
39 Low Unsafe_Use_Of_Target_blank plugins/rollbar/src/components/RollbarTopItemsTable/RollbarTopItemsTable.tsx Checkmarx
41 Low Unsafe_Use_Of_Target_blank plugins/bazaar/src/components/About/About.tsx Checkmarx
93 Low Unsafe_Use_Of_Target_blank plugins/git-release-manager/src/components/ResponseStepDialog/ResponseStepListItem.tsx Checkmarx
64 Low Unsafe_Use_Of_Target_blank plugins/catalog/src/components/EntityLinksCard/EntityLinksEmptyState.tsx Checkmarx
64 Low Unsafe_Use_Of_Target_blank plugins/git-release-manager/src/features/Stats/Row/Row.tsx Checkmarx
214 Low Unsafe_Use_Of_Target_blank plugins/firehydrant/src/components/ServiceDetailsCard/ServiceDetailsCard.tsx Checkmarx
137 Low Unsafe_Use_Of_Target_blank plugins/gcalendar/src/components/CalendarCard/CalendarEvent.tsx Checkmarx
56 Low Unsafe_Use_Of_Target_blank plugins/scaffolder/src/components/TaskPage/TaskPageLinks.tsx Checkmarx
43 Low Unsafe_Use_Of_Target_blank plugins/circleci/src/components/BuildWithStepsPage/BuildWithStepsPage.tsx Checkmarx
246 Low Unsafe_Use_Of_Target_blank plugins/github-actions/src/components/WorkflowRunDetails/WorkflowRunDetails.tsx Checkmarx
36 Low React_Deprecated plugins/techdocs/src/reader/transformers/addSidebarToggle.ts Checkmarx
6 Low React_Deprecated packages/create-app/templates/default-app/packages/app/src/index.tsx Checkmarx
77 Low React_Deprecated plugins/techdocs/src/reader/transformers/addGitFeedbackLink.ts Checkmarx
22 Low React_Deprecated packages/techdocs-cli-embedded-app/src/index.tsx Checkmarx
22 Low React_Deprecated packages/app/src/index.tsx Checkmarx
1 Low Potential_Clickjacking_on_Legacy_Browsers packages/app/public/index.html Checkmarx
40 Low Open_Redirect plugins/app-backend/src/lib/assets/createStaticAssetMiddleware.ts Checkmarx
7 Low Default_Definer_Rights_in_Method_Definition contrib/chart/backstage/files/create-backend-dbs.sql Checkmarx
22 Low Client_Weak_Cryptographic_Hash plugins/catalog-backend/src/database/util.ts Checkmarx
75 Low Client_Weak_Cryptographic_Hash packages/cli/config/jestSucraseTransform.js Checkmarx
156 Low Client_Weak_Cryptographic_Hash packages/cli/config/jest.js Checkmarx
28 Low Client_Weak_Cryptographic_Hash plugins/catalog-backend/src/stitching/util.ts Checkmarx
29 Low Client_Weak_Cryptographic_Hash plugins/catalog-backend/src/util/conversion.ts Checkmarx
111 Low Client_Weak_Cryptographic_Hash packages/backend-common/src/cache/CacheClient.ts Checkmarx
45 Low Client_Use_Of_Iframe_Without_Sandbox plugins/allure/src/components/AllureReportComponent/AllureReportComponent.tsx Checkmarx
111 Low Client_Use_Of_Iframe_Without_Sandbox plugins/lighthouse/src/components/AuditView/index.tsx Checkmarx
36 45 Low Client_Use_Of_Iframe_Without_Sandbox microsite/pages/en/live.js Checkmarx
79 113 148 184 217 251 281 Low Client_Use_Of_Iframe_Without_Sandbox microsite/pages/en/demos.js Checkmarx
28 Low Client_Use_Of_Iframe_Without_Sandbox microsite/pages/en/nominate.js Checkmarx
104 Low Client_Regex_Injection plugins/catalog-backend-module-github/src/GithubDiscoveryProcessor.ts Checkmarx
30 Low Client_DOM_Open_Redirect plugins/catalog-backend/src/util/conversion.ts Checkmarx
104 Low Client_DOM_Open_Redirect plugins/catalog-backend-module-github/src/GithubDiscoveryProcessor.ts Checkmarx
57 Low Client_DOM_Open_Redirect packages/core-components/src/components/LogViewer/RealLogViewer.tsx Checkmarx
108 High Reflected_XSS plugins/search-backend/src/service/router.ts Checkmarx
40 High Reflected_XSS plugins/app-backend/src/lib/assets/createStaticAssetMiddleware.ts Checkmarx
53 59 65 66 72 73 79 80 High Reflected_XSS plugins/rollbar-backend/src/service/router.ts Checkmarx
50 High Reflected_XSS plugins/periskop-backend/src/service/router.ts Checkmarx
46 47 83 High Reflected_XSS plugins/jenkins-backend/src/service/router.ts Checkmarx
44 High Reflected_XSS plugins/bazaar-backend/src/service/router.ts Checkmarx
36 High Insecure_Storage_of_Sensitive_Data plugins/auth-backend/src/service/standaloneServer.ts Checkmarx
62 High Client_DOM_XSS plugins/git-release-manager/src/hooks/useQueryHandler.ts Checkmarx

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant