[Snyk] Upgrade @babel/core from 7.8.3 to 7.28.3

[YoYBaBy]

Snyk has created this PR to upgrade @babel/core from 7.8.3 to 7.28.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 129 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELHELPERS-9397697	452	Proof of Concept
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	452	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	452	Proof of Concept

Release notes

Package name: @babel/core

• 7.28.3 - 2025-08-14
  

  v7.28.3 (2025-08-14)

  👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
    • #17443 [static blocks] Do not inject new static fields after static code (@ nicolo-ribaudo)

  🐛 Bug Fix

  • babel-parser
    • #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@ easrng)
    • #17478 fix(parser): stop subscript parsing on async arrow (@ JLHwung)

  💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime
    • #17363 Do not save last yield in call in temp var (@ nicolo-ribaudo)

  📝 Documentation

  • #17448 move eslint-{parser,plugin} docs to the website (@ JLHwung)

  🏠 Internal

  • #17454 Enable type checking for scripts and babel-worker.cjs (@ JLHwung)

  🔬 Output optimization

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
    • #17444 Optimize do expression output (@ JLHwung)

  Committers: 5

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Jam Balaya (@ JamBalaya56562)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • easrng (@ easrng)
• 7.28.0 - 2025-07-02
  

  v7.28.0 (2025-07-02)

  🚀 New Feature

  • babel-node
    • #17147 Support top level await in node repl (@ liuxingbaoyu)
  • babel-types
    • #17258 feat(matchesPattern): support super/private/meta (@ JLHwung)
  • babel-compat-data, babel-preset-env
    • #17355 Add explicit resource management to preset-env (@ JLHwung)
  • babel-core, babel-parser
    • #17390 Support sourceType: "commonjs" (@ JLHwung)
  • babel-generator, babel-parser
    • #17346 Materialize explicitResourceManagement parser plugin (@ JLHwung)
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
    • #17391 LVal coverage updates (Part 2) (@ JLHwung)
  • babel-parser, babel-traverse, babel-types
    • #17378 Accept bigints in t.bigIntLiteral factory (@ JLHwung)
  • babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
    • #17277 Transform discard binding (@ JLHwung)
  • babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
    • #17163 Parse discard binding (@ JLHwung)

  🐛 Bug Fix

  • babel-helper-globals, babel-plugin-transform-classes, babel-traverse
    • #17297 Create babel-helper-globals (@ JLHwung)
  • babel-types
    • #17009 feature: TSTypeOperator: keyof (#16799) (@ coderaiser)

  🏠 Internal

  • babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
    • #17403 Update babel-polyfill packages (@ nicolo-ribaudo)

  Committers: 5

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • @ liuxingbaoyu
  • coderaiser (@ coderaiser)
• 7.27.7 - 2025-06-26
  

  v7.27.7 (2025-06-26)

  Thanks @ arthur-mountain and @ evankanderson for your first PRs!

  👓 Spec Compliance

  • babel-parser, babel-plugin-transform-classes
    • #17203 Interepret parser allow* options as top level only (@ JLHwung)
  • babel-parser
    • #17371 fix: disable using in ambient context (@ JLHwung)

  🐛 Bug Fix

  • babel-core
    • #17392 Improve TS babel config loading (@ JLHwung)
  • babel-types
    • #17376 fix: support negative bigint in valueToNode (@ JLHwung)
  • babel-plugin-transform-parameters
    • #17352 fix: Params of async function* should throw synchronously (@ liuxingbaoyu)

  🏠 Internal

  • babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread
    • #17389 Use NodePath#splitExportDeclaration in destructuring transforms (@ JLHwung)

  Committers: 6

  • Arthur (@ arthur-mountain)
  • Babel Bot (@ babel-bot)
  • Evan Anderson (@ evankanderson)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • @ liuxingbaoyu
• 7.27.4 - 2025-05-30
  

  v7.27.4 (2025-05-30)

  👓 Spec Compliance

  • babel-parser, babel-plugin-proposal-explicit-resource-management
    • #17323 Disallow using in bare case statement (@ JLHwung)

  💅 Polish

  • babel-parser
    • #17311 Improve parseExpression error messages (@ JLHwung)

  🔬 Output optimization

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
    • #17287 Reduce regenerator size more (@ liuxingbaoyu)
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
    • #17334 Use shorter method names for regenerator context (@ nicolo-ribaudo)
    • #17268 Reduce regenerator helper size (@ liuxingbaoyu)
  • babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
    • #17238 Split regeneratorRuntime into multiple helpers (@ nicolo-ribaudo)

  Committers: 4

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • @ liuxingbaoyu
• 7.27.3 - 2025-05-27
• 7.27.1 - 2025-04-30
• 7.26.10 - 2025-03-11
• 7.26.9 - 2025-02-14
• 7.26.8 - 2025-02-08
• 7.26.7 - 2025-01-24
• 7.26.0 - 2024-10-25
• 7.25.9 - 2024-10-22
• 7.25.8 - 2024-10-10
• 7.25.7 - 2024-10-02
• 7.25.2 - 2024-07-30
• 7.24.9 - 2024-07-15
• 7.24.8 - 2024-07-11
• 7.24.7 - 2024-06-05
• 7.24.6 - 2024-05-24
• 7.24.5 - 2024-04-29
• 7.24.4 - 2024-04-03
• 7.24.3 - 2024-03-20
• 7.24.1 - 2024-03-19
• 7.24.0 - 2024-02-28
• 7.23.9 - 2024-01-25
• 7.23.7 - 2023-12-29
• 7.23.6 - 2023-12-11
• 7.23.5 - 2023-11-29
• 7.23.3 - 2023-11-09
• 7.23.2 - 2023-10-12
• 7.23.0 - 2023-09-25
• 7.22.20 - 2023-09-16
• 7.22.19 - 2023-09-14
• 7.22.18 - 2023-09-14
• 7.22.17 - 2023-09-08
• 7.22.15 - 2023-09-04
• 7.22.11 - 2023-08-24
• 7.22.10 - 2023-08-07
• 7.22.9 - 2023-07-12
• 7.22.8 - 2023-07-06
• 7.22.7 - 2023-07-06
• 7.22.6 - 2023-07-04
• 7.22.5 - 2023-06-08
• 7.22.1 - 2023-05-26
• 7.22.0 - 2023-05-26
• 7.21.8 - 2023-05-02
• 7.21.5 - 2023-04-28
• 7.21.4 - 2023-03-31
• 7.21.4-esm.4 - 2023-04-04
• 7.21.4-esm.3 - 2023-04-04
• 7.21.4-esm.2 - 2023-04-04
• 7.21.4-esm.1 - 2023-04-04
• 7.21.4-esm - 2023-04-04
• 7.21.3 - 2023-03-14
• 7.21.0 - 2023-02-20
• 7.20.12 - 2023-01-04
• 7.20.7 - 2022-12-22
• 7.20.5 - 2022-11-28
• 7.20.2 - 2022-11-04
• 7.19.6 - 2022-10-20
• 7.19.3 - 2022-09-27
• 7.19.1 - 2022-09-14
• 7.19.0 - 2022-09-05
• 7.18.13 - 2022-08-22
• 7.18.10 - 2022-08-01
• 7.18.9 - 2022-07-18
• 7.18.6 - 2022-06-27
• 7.18.5 - 2022-06-13
• 7.18.2 - 2022-05-25
• 7.18.0 - 2022-05-19
• 7.17.12 - 2022-05-16
• 7.17.10 - 2022-04-29
• 7.17.9 - 2022-04-06
• 7.17.8 - 2022-03-18
• 7.17.7 - 2022-03-14
• 7.17.5 - 2022-02-17
• 7.17.4 - 2022-02-15
• 7.17.3 - 2022-02-15
• 7.17.2 - 2022-02-08
• 7.17.0 - 2022-02-02
• 7.16.12 - 2022-01-22
• 7.16.10 - 2022-01-19
• 7.16.7 - 2021-12-31
• 7.16.5 - 2021-12-13
• 7.16.0 - 2021-10-29
• 7.15.8 - 2021-10-06
• 7.15.5 - 2021-09-04
• 7.15.4 - 2021-09-02
• 7.15.0 - 2021-08-04
• 7.14.8 - 2021-07-20
• 7.14.6 - 2021-06-14
• 7.14.5 - 2021-06-09
• 7.14.3 - 2021-05-17
• 7.14.2 - 2021-05-12
• 7.14.0 - 2021-04-29
• 7.13.16 - 2021-04-20
• 7.13.15 - 2021-04-08
• 7.13.14 - 2021-03-29
• 7.13.13 - 2021-03-26
• 7.13.10 - 2021-03-08
• 7.13.8 - 2021-02-26
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.16 - 2021-02-11
• 7.12.13 - 2021-02-03
• 7.12.10 - 2020-12-09
• 7.12.9 - 2020-11-24
• 7.12.8 - 2020-11-23
• 7.12.7 - 2020-11-20
• 7.12.3 - 2020-10-16
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.6 - 2020-09-03
• 7.11.5 - 2020-08-31
• 7.11.4 - 2020-08-20
• 7.11.1 - 2020-08-04
• 7.11.0 - 2020-07-30
• 7.10.5 - 2020-07-14
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.2 - 2020-05-30
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.0 - 2020-03-20
• 7.8.7 - 2020-03-05
• 7.8.6 - 2020-02-27
• 7.8.4 - 2020-01-30
• 7.8.3 - 2020-01-13

from @babel/core GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs