[Snyk] Upgrade @babel/preset-env from 7.18.2 to 7.28.3 #252
Conversation
Snyk has created this PR to upgrade @babel/preset-env from 7.18.2 to 7.28.3. See this package in npm: @babel/preset-env See this project in Snyk: https://app.snyk.io/org/mohammadnewton/project/07d2cea7-3ddd-4ce9-bf6d-551dd0a88572?utm_source=github&utm_medium=referral&page=upgrade-pr
Summary of ChangesHello @nejidevelops, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request significantly enhances the project's security and modernizes its JavaScript compilation capabilities by upgrading the Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request correctly upgrades @babel/preset-env, which is important for resolving several security vulnerabilities. To further improve dependency management and prevent potential compatibility issues, I've suggested also updating @babel/core to the same version to maintain consistency across the Babel packages.
| "@babel/core": "^7.4.5", | ||
| "@babel/preset-env": "^7.4.5", | ||
| "@babel/preset-env": "^7.28.3", |
There was a problem hiding this comment.
To ensure compatibility and maintain consistency across Babel packages, it's a good practice to keep all @babel/* dependencies at the same version. I recommend updating @babel/core to match the version of @babel/preset-env.
| "@babel/core": "^7.4.5", | |
| "@babel/preset-env": "^7.4.5", | |
| "@babel/preset-env": "^7.28.3", | |
| "@babel/core": "^7.28.3", | |
| "@babel/preset-env": "^7.28.3", |
Snyk has created this PR to upgrade @babel/preset-env from 7.18.2 to 7.28.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 57 versions ahead of your current version.
The recommended version was released 2 months ago.
Issues fixed by the recommended upgrade:
SNYK-JS-BABELRUNTIME-10044504
SNYK-JS-BABELTRAVERSE-5962462
SNYK-JS-SEMVER-3247795
SNYK-JS-SEMVER-3247795
Release notes
Package name: @babel/preset-env
-
7.28.3 - 2025-08-14
- #17443 [static blocks] Do not inject new static fields after static code (@ nicolo-ribaudo)
- #17465 fix(parser/typescript): parse
- #17478 fix(parser): stop subscript parsing on async arrow (@ JLHwung)
- #17363 Do not save last yield in call in temp var (@ nicolo-ribaudo)
- #17448 move eslint-{parser,plugin} docs to the website (@ JLHwung)
- #17454 Enable type checking for
- #17444 Optimize do expression output (@ JLHwung)
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Jam Balaya (@ JamBalaya56562)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- easrng (@ easrng)
-
7.28.0 - 2025-07-02
- #17147 Support top level await in node repl (@ liuxingbaoyu)
- #17258 feat(matchesPattern): support super/private/meta (@ JLHwung)
- #17355 Add explicit resource management to preset-env (@ JLHwung)
- #17390 Support
- #17346 Materialize
- #17391 LVal coverage updates (Part 2) (@ JLHwung)
- #17378 Accept bigints in
- #17277 Transform discard binding (@ JLHwung)
- #17163 Parse discard binding (@ JLHwung)
- #17297 Create babel-helper-globals (@ JLHwung)
- #17009 feature: TSTypeOperator: keyof (#16799) (@ coderaiser)
- #17403 Update
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
-
7.27.2 - 2025-05-06
-
7.27.1 - 2025-04-30
-
7.26.9 - 2025-02-14
-
7.26.8 - 2025-02-08
-
7.26.7 - 2025-01-24
-
7.26.0 - 2024-10-25
-
7.25.9 - 2024-10-22
-
7.25.8 - 2024-10-10
-
7.25.7 - 2024-10-02
-
7.25.4 - 2024-08-22
-
7.25.3 - 2024-07-31
-
7.25.2 - 2024-07-30
-
7.25.0 - 2024-07-26
-
7.24.8 - 2024-07-11
-
7.24.7 - 2024-06-05
-
7.24.6 - 2024-05-24
-
7.24.5 - 2024-04-29
-
7.24.4 - 2024-04-03
-
7.24.3 - 2024-03-20
-
7.24.1 - 2024-03-19
-
7.24.0 - 2024-02-28
-
7.23.9 - 2024-01-25
-
7.23.8 - 2024-01-08
-
7.23.7 - 2023-12-29
-
7.23.6 - 2023-12-11
-
7.23.5 - 2023-11-29
-
7.23.3 - 2023-11-09
-
7.23.2 - 2023-10-11
-
7.22.20 - 2023-09-16
-
7.22.15 - 2023-09-04
-
7.22.14 - 2023-08-30
-
7.22.10 - 2023-08-07
-
7.22.9 - 2023-07-12
-
7.22.7 - 2023-07-06
-
7.22.6 - 2023-07-04
-
7.22.5 - 2023-06-08
-
7.22.4 - 2023-05-29
-
7.22.2 - 2023-05-26
-
7.22.1 - 2023-05-26
-
7.22.0 - 2023-05-26
-
7.21.5 - 2023-04-28
-
7.21.4 - 2023-03-31
-
7.21.4-esm.4 - 2023-04-04
-
7.21.4-esm.3 - 2023-04-04
-
7.21.4-esm.2 - 2023-04-04
-
7.21.4-esm.1 - 2023-04-04
-
7.21.4-esm - 2023-04-04
-
7.20.2 - 2022-11-04
-
7.19.4 - 2022-10-10
-
7.19.3 - 2022-09-27
-
7.19.1 - 2022-09-14
-
7.19.0 - 2022-09-05
-
7.18.10 - 2022-08-01
-
7.18.9 - 2022-07-18
-
7.18.6 - 2022-06-27
-
7.18.2 - 2022-05-25
from @babel/preset-env GitHub release notesv7.28.3 (2025-08-14)
👓 Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env🐛 Bug Fix
babel-parserimport("./a", {with:{},})(@ easrng)💅 Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime📝 Documentation
🏠 Internal
scriptsandbabel-worker.cjs(@ JLHwung)🔬 Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsCommitters: 5
v7.28.0 (2025-07-02)
🚀 New Feature
babel-nodebabel-typesbabel-compat-data,babel-preset-envbabel-core,babel-parsersourceType: "commonjs"(@ JLHwung)babel-generator,babel-parserexplicitResourceManagementparser plugin (@ JLHwung)babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-plugin-transform-object-rest-spread,babel-traverse,babel-typesbabel-parser,babel-traverse,babel-typest.bigIntLiteralfactory (@ JLHwung)babel-generator,babel-plugin-proposal-destructuring-private,babel-plugin-proposal-discard-binding,babel-plugin-transform-destructuring,babel-plugin-transform-explicit-resource-management,babel-plugin-transform-react-display-name,babel-typesbabel-generator,babel-parser,babel-plugin-proposal-destructuring-private,babel-plugin-transform-block-scoping,babel-plugin-transform-object-rest-spread,babel-plugin-transform-typescript,babel-traverse,babel-types🐛 Bug Fix
babel-helper-globals,babel-plugin-transform-classes,babel-traversebabel-types🏠 Internal
babel-compat-data,babel-plugin-proposal-decorators,babel-plugin-transform-async-generator-functions,babel-plugin-transform-json-modules,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-preset-env,babel-runtime-corejs3babel-polyfillpackages (@ nicolo-ribaudo)Committers: 5
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: