Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade acorn from 8.10.0 to 8.11.2 #13935

Closed
wants to merge 1 commit into from

Conversation

snipe
Copy link
Owner

@snipe snipe commented Nov 23, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade acorn from 8.10.0 to 8.11.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 3 versions ahead of your current version.
  • The recommended version was released a month ago, on 2023-10-27.
Release notes
Package name: acorn
  • 8.11.2 - 2023-10-27

    Bug fixes

    Fix a bug that caused regular expressions after colon tokens to not be properly tokenized in some circumstances.

  • 8.11.1 - 2023-10-26

    Bug fixes

    Fix a regression where onToken would receive 'name' tokens for 'new' keyword tokens.

  • 8.11.0 - 2023-10-26

    Bug fixes

    Fix an issue where tokenizing (without parsing) an object literal with a property named class or function could, in some circumstance, put the tokenizer into an invalid state.

    Fix an issue where a slash after a call to a propery named the same as some keywords would be tokenized as a regular expression.

    New features

    Upgrade to Unicode 15.1.

    Use a set of new, much more precise, TypeScript types.

  • 8.10.0 - 2023-07-05

    New features

    Add a checkPrivateFields option that disables strict checking of private property use.

from acorn GitHub release notes
Commit messages
Package name: acorn
  • 31967af Mark version 8.11.2
  • 9cbe3f6 Fix regression in tokenizer regexp disambiguation
  • b65dd42 Mark version 8.11.1
  • 7cd08bf Fix an issue that caused 'new' tokens to be emitted as name tokens to onToken
  • de31821 Mark acorn-loose 8.4.0
  • 4168d2a Mark acorn-walk 8.3.0
  • e0dd391 Mark version 8.11.0
  • 520547b Mark Parser constructor private in types
  • bde8b2d Use writeBundle hook in Rollup copy plugins
  • 2ffb70f Add new type definitions from rwalle/acorn-types
  • 288f80b Bump github actions checkout
  • e31dc0e Add support for Unicode 15.1
  • a9a58fe Bump test262
  • 1ea6ca4 Bump deps
  • 6aae557 Remove references to the forum
  • 7fb1ee7 Mention array support for onComment in source comment
  • 389bcde Fix comment for onInsertedSemicolon
  • ec1beab Add a note about the unreliability of tokenizing to the readme
  • 6cae5ec Fix tokenization of properties named 'class' or 'function'
  • c5b8cae Cache keyword regexps
  • 38b7af4 Fix tokenizing of slash after propery with keyword name
  • e7c9171 Remove checkPatternExport dead code

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@probot-autolabeler probot-autolabeler bot added dependencies Pull requests that update a dependency file javascript labels Nov 23, 2023
Copy link

what-the-diff bot commented Nov 23, 2023

PR Summary

  • Update of 'acorn' library in package.json file
    The version of a JavaScript library called acorn used in the project was updated from 8.9.0 to 8.11.2. This update could possibly improve app stability, fix existing bugs, and add new features or functionalities from the newer version.

@snipe snipe closed this Nov 23, 2023
@snipe snipe mentioned this pull request Nov 23, 2023
@snipe snipe deleted the snyk-upgrade-dd5a92cbd2dd949b7cbda5b785ec5ff1 branch January 3, 2024 23:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants