[Snyk] Upgrade @babel/core from 7.8.3 to 7.28.0 #956

YoYBaBy · 2025-07-30T15:43:01Z

Snyk has created this PR to upgrade @babel/core from 7.8.3 to 7.28.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 128 versions ahead of your current version.
The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELHELPERS-9397697	452	Proof of Concept
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	452	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	452	Proof of Concept

Release notes

Package name: @babel/core

7.28.0 - 2025-07-02
v7.28.0 (2025-07-02)

🚀 New Feature
- babel-node
  - #17147 Support top level await in node repl (@ liuxingbaoyu)
- babel-types
  - #17258 feat(matchesPattern): support super/private/meta (@ JLHwung)
- babel-compat-data, babel-preset-env
  - #17355 Add explicit resource management to preset-env (@ JLHwung)
- babel-core, babel-parser
  - #17390 Support sourceType: "commonjs" (@ JLHwung)
- babel-generator, babel-parser
  - #17346 Materialize explicitResourceManagement parser plugin (@ JLHwung)
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  - #17391 LVal coverage updates (Part 2) (@ JLHwung)
- babel-parser, babel-traverse, babel-types
  - #17378 Accept bigints in t.bigIntLiteral factory (@ JLHwung)
- babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  - #17277 Transform discard binding (@ JLHwung)
- babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
  - #17163 Parse discard binding (@ JLHwung)
🐛 Bug Fix
- babel-helper-globals, babel-plugin-transform-classes, babel-traverse
  - #17297 Create babel-helper-globals (@ JLHwung)
- babel-types
  - #17009 feature: TSTypeOperator: keyof (#16799) (@ coderaiser)
🏠 Internal
- babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  - #17403 Update babel-polyfill packages (@ nicolo-ribaudo)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
7.27.7 - 2025-06-26
v7.27.7 (2025-06-26)

Thanks @ arthur-mountain and @ evankanderson for your first PRs!

👓 Spec Compliance
- babel-parser, babel-plugin-transform-classes
  - #17203 Interepret parser allow* options as top level only (@ JLHwung)
- babel-parser
  - #17371 fix: disable using in ambient context (@ JLHwung)
🐛 Bug Fix
- babel-core
  - #17392 Improve TS babel config loading (@ JLHwung)
- babel-types
  - #17376 fix: support negative bigint in valueToNode (@ JLHwung)
- babel-plugin-transform-parameters
  - #17352 fix: Params of async function* should throw synchronously (@ liuxingbaoyu)
🏠 Internal
- babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread
  - #17389 Use NodePath#splitExportDeclaration in destructuring transforms (@ JLHwung)
Committers: 6
- Arthur (@ arthur-mountain)
- Babel Bot (@ babel-bot)
- Evan Anderson (@ evankanderson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.27.4 - 2025-05-30
v7.27.4 (2025-05-30)

👓 Spec Compliance
- babel-parser, babel-plugin-proposal-explicit-resource-management
  - #17323 Disallow using in bare case statement (@ JLHwung)
💅 Polish
- babel-parser
  - #17311 Improve parseExpression error messages (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17287 Reduce regenerator size more (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  - #17334 Use shorter method names for regenerator context (@ nicolo-ribaudo)
  - #17268 Reduce regenerator helper size (@ liuxingbaoyu)
- babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  - #17238 Split regeneratorRuntime into multiple helpers (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.27.3 - 2025-05-27
v7.27.3 (2025-05-27)

🐛 Bug Fix
- babel-generator
  - #17324 Improve multiline comments handling in yield/await expression (@ JLHwung)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17328 Correctly set .displayName on GeneratorFunction (@ nicolo-ribaudo)
- babel-plugin-proposal-explicit-resource-management
  - #17319 fix: handle shadowed binding in for using of body (@ JLHwung)
  - #17317 fix: support named evaluation for using declaration (@ JLHwung)
- babel-plugin-proposal-decorators, babel-types
  - #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@ magic-akari)
- babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  - #17257 Preserve class id when transforming using declarations with exported class (@ JLHwung)
- babel-parser
  - #17312 fix(parser): properly handle optional markers in generator class methods (@ magic-akari)
  - #17307 fix(parser): Terminate modifier parsing at newline (@ magic-akari)
- babel-generator, babel-parser
  - #17308 Improve import phase parsing (@ JLHwung)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Vik R (@ vikr01)
- @ liuxingbaoyu
- @ magic-akari
- fisker Cheung (@ fisker)
7.27.1 - 2025-04-30
v7.27.1 (2025-04-30)

Thanks @ kermanx and @ woaitsAryan for your first PRs!

👓 Spec Compliance
- babel-parser
  - #17254 Allow using of as lexical declaration within for (@ JLHwung)
  - #17230 Disallow get/set in TSPropertySignature (@ JLHwung)
- babel-parser, babel-types
  - #17193 Stricter TSImportType options parsing (@ JLHwung)
🐛 Bug Fix
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  - #17137 fix: do expressions should allow early exit (@ kermanx)
- babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  - #17251 Fix: propagate argument evaluation errors through async promise chain (@ magic-akari)
- babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  - #17231 fix apply()/call() annotated as pure (@ Lacsw)
- babel-helper-fixtures, babel-parser
  - #17233 Create ChainExpression within TSInstantiationExpression (@ JLHwung)
- babel-generator, babel-parser
  - #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@ JLHwung)
- babel-parser
  - #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@ JLHwung)
  - #17080 Fix start of TSParameterProperty (@ JLHwung)
- babel-compat-data, babel-preset-env
  - #17228 Update firefox bugfix compat data (@ JLHwung)
- babel-traverse
  - #17156 fix: Objects and arrays with multiple references should not be evaluated (@ liuxingbaoyu)
- babel-generator
  - #17216 Fix: support const type parameter in generator (@ JLHwung)
💅 Polish
- babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
  - #17221 Reduce generated names size for the 10th-11th (@ nicolo-ribaudo)
🏠 Internal
- babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17263 Remove unused regenerator-runtime dep in @ babel/runtime (@ nicolo-ribaudo)
- babel-compat-data, babel-preset-env
  - #17256 Tune plugin compat data (@ JLHwung)
- babel-compat-data, babel-standalone
  - #17236 migrate babel-compat-data build script to mjs (@ JLHwung)
- babel-register
  - #16844 Migrate @ babel/register to cts (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17205 Inline regenerator in the relevant packages (@ nicolo-ribaudo)
- All packages
  - #17207 Enforce node protocol import (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  - #16538 Reduce interopRequireWildcard size (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17213 Reduce regeneratorRuntime size (@ liuxingbaoyu)
Committers: 9
- Aryan Bharti (@ woaitsAryan)
- Babel Bot (@ babel-bot)
- Frolov Roman (@ Lacsw)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- @ magic-akari
- _Kerman (@ kermanx)
- fisker Cheung (@ fisker)
7.26.10 - 2025-03-11
7.26.9 - 2025-02-14
7.26.8 - 2025-02-08
7.26.7 - 2025-01-24
7.26.0 - 2024-10-25
7.25.9 - 2024-10-22
7.25.8 - 2024-10-10
7.25.7 - 2024-10-02
7.25.2 - 2024-07-30
7.24.9 - 2024-07-15
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.4 - 2024-04-03
7.24.3 - 2024-03-20
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-12
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.5 - 2022-02-17
7.17.4 - 2022-02-15
7.17.3 - 2022-02-15
7.17.2 - 2022-02-08
7.17.0 - 2022-02-02
7.16.12 - 2022-01-22
7.16.10 - 2022-01-19
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.5 - 2021-09-04
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.8 - 2021-07-20
7.14.6 - 2021-06-14
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.14.0 - 2021-04-29
7.13.16 - 2021-04-20
7.13.15 - 2021-04-08
7.13.14 - 2021-03-29
7.13.13 - 2021-03-26
7.13.10 - 2021-03-08
7.13.8 - 2021-02-26
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.10 - 2020-12-09
7.12.9 - 2020-11-24
7.12.8 - 2020-11-23
7.12.7 - 2020-11-20
7.12.3 - 2020-10-16
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.6 - 2020-09-03
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.1 - 2020-08-04
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13

from @babel/core GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @babel/core from 7.8.3 to 7.28.0. See this package in npm: @babel/core See this project in Snyk: https://app.snyk.io/org/bvbvyoy/project/971b8e37-9220-4b6d-ae61-3bede42c34ba?utm_source=github&utm_medium=referral&page=upgrade-pr

[Snyk] Upgrade @babel/core from 7.8.3 to 7.28.0 #956

Are you sure you want to change the base?

[Snyk] Upgrade @babel/core from 7.8.3 to 7.28.0 #956

Uh oh!

Conversation

YoYBaBy commented Jul 30, 2025

Snyk has created this PR to upgrade @babel/core from 7.8.3 to 7.28.0.

Issues fixed by the recommended upgrade:

v7.28.0 (2025-07-02)

🚀 New Feature

🐛 Bug Fix

🏠 Internal

Committers: 5

v7.27.7 (2025-06-26)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Committers: 6

v7.27.4 (2025-05-30)

👓 Spec Compliance

💅 Polish

🔬 Output optimization

Committers: 4

v7.27.3 (2025-05-27)

🐛 Bug Fix

Committers: 7

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 9

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants