Browserslist 4.12.0 introduces a notable update for front-end developers, building upon the robust foundation of version 4.11.1. The core functionality remains consistent: enabling the sharing of target browsers across various front-end tools like Autoprefixer, Stylelint, and babel-env-preset, streamlining the development workflow and ensuring consistent cross-browser compatibility. The key distinction lies in the updated dependencies, reflecting the ever-evolving landscape of browser support and related technologies. Specifically, caniuse-lite jumps from version 1.0.30001038 to 1.0.30001043 and electron-to-chromium advances from 1.3.390 to 1.3.413. These upgrades signal improvements in browser support data and the mapping between Electron versions and underlying Chromium versions, respectively. Developers benefit from these enhancements through more accurate and up-to-date browser targeting, potentially leading to more efficient code transformations and reduced compatibility issues. The updated caniuse-lite ensures that developers are leveraging the latest information on browser feature support, improving decision-making around polyfills and fallback strategies. The electron-to-chromium bump provides more refined alignment for Electron-based applications, ensuring consistent behavior across different Electron versions. While file count remains at 10, the unpacked size see's a small increase, going from 83883 to 85531, potentially indicating minor additions or adjustments within the core libraries.
All the vulnerabilities related to the version 4.12.0 of the package
Regular Expression Denial of Service in browserslist
The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.