[Snyk] Upgrade @babel/core from 7.18.2 to 7.28.4 #263
Conversation
Snyk has created this PR to upgrade @babel/core from 7.18.2 to 7.28.4. See this package in npm: @babel/core See this project in Snyk: https://app.snyk.io/org/mohammadnewton/project/07d2cea7-3ddd-4ce9-bf6d-551dd0a88572?utm_source=github&utm_medium=referral&page=upgrade-pr
Summary of ChangesHello @nejidevelops, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request, automatically generated by Snyk, aims to enhance the project's security posture and maintainability by upgrading the Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request, automatically generated by Snyk, upgrades @babel/core to resolve several security vulnerabilities, one of which is critical. While this is a crucial update, I've noticed that @babel/preset-env is not being upgraded along with it. It is a best practice to keep all @babel packages on the same version to avoid compatibility issues. I've left a comment with a suggestion to update @babel/preset-env as well.
| "@babel/core": "^7.28.4", | ||
| "@babel/preset-env": "^7.4.5", |
There was a problem hiding this comment.
To ensure compatibility and prevent potential build or runtime issues, it's highly recommended to keep all @babel packages at the same version. Since @babel/core is being upgraded to 7.28.4, @babel/preset-env should also be upgraded to match this version.
| "@babel/core": "^7.28.4", | |
| "@babel/preset-env": "^7.4.5", | |
| "@babel/core": "^7.28.4", | |
| "@babel/preset-env": "^7.28.4", |
Snyk has created this PR to upgrade @babel/core from 7.18.2 to 7.28.4.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 69 versions ahead of your current version.
The recommended version was released 2 months ago.
Issues fixed by the recommended upgrade:
SNYK-JS-BABELTRAVERSE-5962462
SNYK-JS-JSON5-3182856
SNYK-JS-BABELHELPERS-9397697
Release notes
Package name: @babel/core
-
7.28.4 - 2025-09-05
- #17493 Update Jest to v30.1.1 (@ JLHwung)
- #17455 chore: Clean up
- #17474 Switch to @ jridgewell/remapping (@ mrginglymus)
- Babel Bot (@ babel-bot)
- Bill Collins (@ mrginglymus)
- Glenn Willen (@ gwillen)
- Huáng Jùnliàng (@ JLHwung)
- @ liuxingbaoyu
-
7.28.3 - 2025-08-14
- #17443 [static blocks] Do not inject new static fields after static code (@ nicolo-ribaudo)
- #17465 fix(parser/typescript): parse
- #17478 fix(parser): stop subscript parsing on async arrow (@ JLHwung)
- #17363 Do not save last yield in call in temp var (@ nicolo-ribaudo)
- #17448 move eslint-{parser,plugin} docs to the website (@ JLHwung)
- #17454 Enable type checking for
- #17444 Optimize do expression output (@ JLHwung)
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Jam Balaya (@ JamBalaya56562)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- easrng (@ easrng)
-
7.28.0 - 2025-07-02
- #17147 Support top level await in node repl (@ liuxingbaoyu)
- #17258 feat(matchesPattern): support super/private/meta (@ JLHwung)
- #17355 Add explicit resource management to preset-env (@ JLHwung)
- #17390 Support
- #17346 Materialize
- #17391 LVal coverage updates (Part 2) (@ JLHwung)
- #17378 Accept bigints in
- #17277 Transform discard binding (@ JLHwung)
- #17163 Parse discard binding (@ JLHwung)
- #17297 Create babel-helper-globals (@ JLHwung)
- #17009 feature: TSTypeOperator: keyof (#16799) (@ coderaiser)
- #17403 Update
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
-
7.27.7 - 2025-06-26
- #17203 Interepret parser
- #17371 fix: disable using in ambient context (@ JLHwung)
- #17392 Improve TS babel config loading (@ JLHwung)
- #17376 fix: support negative bigint in valueToNode (@ JLHwung)
- #17352 fix: Params of
- #17389 Use
- Arthur (@ arthur-mountain)
- Babel Bot (@ babel-bot)
- Evan Anderson (@ evankanderson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
-
7.27.4 - 2025-05-30
-
7.27.3 - 2025-05-27
-
7.27.1 - 2025-04-30
-
7.26.10 - 2025-03-11
-
7.26.9 - 2025-02-14
-
7.26.8 - 2025-02-08
-
7.26.7 - 2025-01-24
-
7.26.0 - 2024-10-25
-
7.25.9 - 2024-10-22
-
7.25.8 - 2024-10-10
-
7.25.7 - 2024-10-02
-
7.25.2 - 2024-07-30
-
7.24.9 - 2024-07-15
-
7.24.8 - 2024-07-11
-
7.24.7 - 2024-06-05
-
7.24.6 - 2024-05-24
-
7.24.5 - 2024-04-29
-
7.24.4 - 2024-04-03
-
7.24.3 - 2024-03-20
-
7.24.1 - 2024-03-19
-
7.24.0 - 2024-02-28
-
7.23.9 - 2024-01-25
-
7.23.7 - 2023-12-29
-
7.23.6 - 2023-12-11
-
7.23.5 - 2023-11-29
-
7.23.3 - 2023-11-09
-
7.23.2 - 2023-10-12
-
7.23.0 - 2023-09-25
-
7.22.20 - 2023-09-16
-
7.22.19 - 2023-09-14
-
7.22.18 - 2023-09-14
-
7.22.17 - 2023-09-08
-
7.22.15 - 2023-09-04
-
7.22.11 - 2023-08-24
-
7.22.10 - 2023-08-07
-
7.22.9 - 2023-07-12
-
7.22.8 - 2023-07-06
-
7.22.7 - 2023-07-06
-
7.22.6 - 2023-07-04
-
7.22.5 - 2023-06-08
-
7.22.1 - 2023-05-26
-
7.22.0 - 2023-05-26
-
7.21.8 - 2023-05-02
-
7.21.5 - 2023-04-28
-
7.21.4 - 2023-03-31
-
7.21.4-esm.4 - 2023-04-04
-
7.21.4-esm.3 - 2023-04-04
-
7.21.4-esm.2 - 2023-04-04
-
7.21.4-esm.1 - 2023-04-04
-
7.21.4-esm - 2023-04-04
-
7.21.3 - 2023-03-14
-
7.21.0 - 2023-02-20
-
7.20.12 - 2023-01-04
-
7.20.7 - 2022-12-22
-
7.20.5 - 2022-11-28
-
7.20.2 - 2022-11-04
-
7.19.6 - 2022-10-20
-
7.19.3 - 2022-09-27
-
7.19.1 - 2022-09-14
-
7.19.0 - 2022-09-05
-
7.18.13 - 2022-08-22
-
7.18.10 - 2022-08-01
-
7.18.9 - 2022-07-18
-
7.18.6 - 2022-06-27
-
7.18.5 - 2022-06-13
-
7.18.2 - 2022-05-25
from @babel/core GitHub release notesv7.28.4 (2025-09-05)
Thanks @ gwillen and @ mrginglymus for your first PRs!
🏠 Internal
babel-core,babel-helper-check-duplicate-nodes,babel-traverse,babel-typesbabel-plugin-transform-regeneratortransform-regenerator(@ liuxingbaoyu)babel-coreCommitters: 5
v7.28.3 (2025-08-14)
👓 Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env🐛 Bug Fix
babel-parserimport("./a", {with:{},})(@ easrng)💅 Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime📝 Documentation
🏠 Internal
scriptsandbabel-worker.cjs(@ JLHwung)🔬 Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsCommitters: 5
v7.28.0 (2025-07-02)
🚀 New Feature
babel-nodebabel-typesbabel-compat-data,babel-preset-envbabel-core,babel-parsersourceType: "commonjs"(@ JLHwung)babel-generator,babel-parserexplicitResourceManagementparser plugin (@ JLHwung)babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-plugin-transform-object-rest-spread,babel-traverse,babel-typesbabel-parser,babel-traverse,babel-typest.bigIntLiteralfactory (@ JLHwung)babel-generator,babel-plugin-proposal-destructuring-private,babel-plugin-proposal-discard-binding,babel-plugin-transform-destructuring,babel-plugin-transform-explicit-resource-management,babel-plugin-transform-react-display-name,babel-typesbabel-generator,babel-parser,babel-plugin-proposal-destructuring-private,babel-plugin-transform-block-scoping,babel-plugin-transform-object-rest-spread,babel-plugin-transform-typescript,babel-traverse,babel-types🐛 Bug Fix
babel-helper-globals,babel-plugin-transform-classes,babel-traversebabel-types🏠 Internal
babel-compat-data,babel-plugin-proposal-decorators,babel-plugin-transform-async-generator-functions,babel-plugin-transform-json-modules,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-preset-env,babel-runtime-corejs3babel-polyfillpackages (@ nicolo-ribaudo)Committers: 5
v7.27.7 (2025-06-26)
Thanks @ arthur-mountain and @ evankanderson for your first PRs!
👓 Spec Compliance
babel-parser,babel-plugin-transform-classesallow*options as top level only (@ JLHwung)babel-parser🐛 Bug Fix
babel-corebabel-typesbabel-plugin-transform-parametersasync function*should throw synchronously (@ liuxingbaoyu)🏠 Internal
babel-plugin-transform-destructuring,babel-plugin-transform-object-rest-spreadNodePath#splitExportDeclarationin destructuring transforms (@ JLHwung)Committers: 6
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: