From d7c0c1edc96f08cf3a6f693fec433f959db5c4e0 Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Sun, 30 Nov 2025 08:53:23 -0800 Subject: [PATCH 1/3] chore(deps): remove unused @babel/runtime-corejs3 dependency The @docusaurus/babel package lists @babel/runtime-corejs3 as a dependency, but it is not used anywhere in the codebase: 1. The Babel preset explicitly sets `corejs: false` in the transform-runtime plugin configuration 2. The absoluteRuntime path points to @babel/runtime, not @babel/runtime-corejs3 3. No source files import from @babel/runtime-corejs3 This dependency brings in core-js-pure, which executes a postinstall script during npm install. Removing unused dependencies that run install scripts helps reduce supply chain attack surface. Fixes #11585 --- packages/docusaurus-babel/package.json | 1 - 1 file changed, 1 deletion(-) diff --git a/packages/docusaurus-babel/package.json b/packages/docusaurus-babel/package.json index 5c3886aa7043..2da7cef99cd2 100644 --- a/packages/docusaurus-babel/package.json +++ b/packages/docusaurus-babel/package.json @@ -36,7 +36,6 @@ "@babel/preset-react": "^7.25.9", "@babel/preset-typescript": "^7.25.9", "@babel/runtime": "^7.25.9", - "@babel/runtime-corejs3": "^7.25.9", "@babel/traverse": "^7.25.9", "@docusaurus/logger": "3.9.2", "@docusaurus/utils": "3.9.2", From 49e858eb95129f20a13d4eceeed2c153192a711b Mon Sep 17 00:00:00 2001 From: sebastien Date: Thu, 4 Dec 2025 11:35:59 +0100 Subject: [PATCH 2/3] empty From e33a01e03ebdad8e993a6c257180781b39c903e6 Mon Sep 17 00:00:00 2001 From: sebastien Date: Thu, 4 Dec 2025 11:48:02 +0100 Subject: [PATCH 3/3] update lockfile --- yarn.lock | 13 ------------- 1 file changed, 13 deletions(-) diff --git a/yarn.lock b/yarn.lock index e71ea0438253..fbcb34622ff7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1214,14 +1214,6 @@ "@babel/plugin-transform-modules-commonjs" "^7.25.9" "@babel/plugin-transform-typescript" "^7.25.9" -"@babel/runtime-corejs3@^7.25.9": - version "7.26.10" - resolved "https://registry.yarnpkg.com/@babel/runtime-corejs3/-/runtime-corejs3-7.26.10.tgz#5a3185ca2813f8de8ae68622572086edf5cf51f2" - integrity sha512-uITFQYO68pMEYR46AHgQoyBg7KPPJDAbGn4jUTIRgCFJIp88MIBUianVOplhZDEec07bp9zIyr4Kp0FCyQzmWg== - dependencies: - core-js-pure "^3.30.2" - regenerator-runtime "^0.14.0" - "@babel/runtime@^7.1.2", "@babel/runtime@^7.10.3", "@babel/runtime@^7.11.2", "@babel/runtime@^7.12.13", "@babel/runtime@^7.12.5", "@babel/runtime@^7.25.9", "@babel/runtime@^7.8.4": version "7.25.9" resolved "https://registry.yarnpkg.com/@babel/runtime/-/runtime-7.25.9.tgz#65884fd6dc255a775402cc1d9811082918f4bf00" @@ -6838,11 +6830,6 @@ core-js-compat@^3.38.0, core-js-compat@^3.38.1: dependencies: browserslist "^4.23.3" -core-js-pure@^3.30.2: - version "3.31.1" - resolved "https://registry.yarnpkg.com/core-js-pure/-/core-js-pure-3.31.1.tgz#73d154958881873bc19381df80bddb20c8d0cdb5" - integrity sha512-w+C62kvWti0EPs4KPMCMVv9DriHSXfQOCQ94bGGBiEW5rrbtt/Rz8n5Krhfw9cpFyzXBjf3DB3QnPdEzGDY4Fw== - core-js@^3.31.1: version "3.38.1" resolved "https://registry.yarnpkg.com/core-js/-/core-js-3.38.1.tgz#aa375b79a286a670388a1a363363d53677c0383e"