[Snyk] Upgrade acorn from 8.2.4 to 8.8.0 #3
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade acorn from 8.2.4 to 8.8.0. See this package in npm: https://www.npmjs.com/package/acorn See this project in Snyk: https://app.snyk.io/org/analytics-eng/project/e2946d2d-133d-4bb6-a2dd-8c638d48e760?utm_source=github&utm_medium=referral&page=upgrade-pr
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade acorn from 8.2.4 to 8.8.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: acorn
-
8.8.0 - 2022-07-21
-
8.7.1 - 2022-04-26
-
8.7.0 - 2021-12-27
-
8.6.0 - 2021-11-18
-
8.5.0 - 2021-09-06
-
8.4.1 - 2021-06-24
-
8.4.0 - 2021-06-11
-
8.3.0 - 2021-05-31
-
8.2.4 - 2021-05-04
from acorn GitHub release notesBug fixes
Allow parentheses around spread args in destructuring object assignment.
Fix an issue where the tree contained
directiveproperties in when parsing with a language version that doesn't support them.New features
Support hashbang comments by default in ECMAScript 2023 and later.
Bug fixes
Stop handling
"use strict"directives in ECMAScript versions before 5.Fix an issue where duplicate quoted export names in
export *syntax were incorrectly checked.Add missing type for
tokTypes.New features
Support quoted export names.
Upgrade to Unicode 14.
Add support for Unicode 13 properties in regular expressions.
Bug fixes
Use a loop to find line breaks, because the existing regexp search would overrun the end of the searched range and waste a lot of time in minified code.
Bug fixes
Fix a bug where an object literal with multiple
__proto__properties would incorrectly be accepted if a later property value held an assigment.New features
Support class private fields with the
inoperator.Bug fixes
Improve context-dependent tokenization in a number of corner cases.
Fix location tracking after a 0x2028 or 0x2029 character in a string literal (which before did not increase the line number).
Fix an issue where arrow function bodies in for loop context would inappropriately consume
inoperators.Fix wrong end locations stored on SequenceExpression nodes.
Implement restriction that
for/ofloop LHS can't start withlet.New features
Add support for ES2022 class static blocks.
Allow multiple input files to be passed to the CLI tool.
Bug fixes
Fix a bug where
allowAwaitOutsideFunctionwould allowawaitin class field initializers, and settingecmaVersionto 13 or higher would allow top-level await in non-module sources.New features
A new option,
allowSuperOutsideMethod, can be used to suppress the error whensuperis used in the wrong context.New features
Default
allowAwaitOutsideFunctionto true for ECMAScript 2022 an higher.Add support for the
p(indices) regexp flag.Bug fixes
Fix spec conformity in corner case 'for await (async of ...)'.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs