Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2025

Bumps @babel/core from 7.23.3 to 7.26.10.

Release notes

Sourced from @​babel/core's releases.

v7.26.10 (2025-03-11)

Thanks @​jordan-choi and @​mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone

🏠 Internal

Committers: 6

v7.26.9 (2025-02-14)

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.26.10 (2025-03-11)

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser, babel-template
  • babel-core
  • babel-parser, babel-plugin-transform-typescript
  • babel-traverse
  • babel-generator
  • babel-parser
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3

💅 Polish

  • babel-standalone

🏠 Internal

v7.26.9 (2025-02-14)

🐛 Bug Fix

🏠 Internal

v7.26.7 (2025-01-24)

🐛 Bug Fix

  • babel-helpers, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-transform-typeof-symbol

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.23.3 to 7.26.10.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 11, 2025
@github-actions
Copy link

Hey @dependabot[bot],

These are the details of your Pull Request:

chore(deps-dev): bump @babel/core from 7.23.3 to 7.26.10

PR URL:
#341

PR Body:

Bumps @babel/core from 7.23.3 to 7.26.10.

Release notes

Sourced from @​babel/core's releases.

v7.26.10 (2025-03-11)

Thanks @​jordan-choi and @​mmmsssttt404 for your first PRs!

This release includes a fix for https://github.com/babel/babel/security/advisories/GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

  • babel-parser
    • #17159 Disallow decorator in array pattern (@​JLHwung)

🐛 Bug Fix

  • babel-parser, babel-template
    • #17164 Fix: always initialize ExportDeclaration attributes (@​JLHwung)
  • babel-core
    • #17142 fix: "Map maximum size exceeded" in deepClone (@​liuxingbaoyu)
  • babel-parser, babel-plugin-transform-typescript
    • #17154 Update typescript parser tests (@​JLHwung)
  • babel-traverse
    • #17151 fix: Should not evaluate vars in child scope (@​liuxingbaoyu)
  • babel-generator
    • #17153 fix: Correctly generate abstract override (@​liuxingbaoyu)
  • babel-parser
    • #17107 Fix source type detection when parsing TypeScript (@​JLHwung)
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3
    • #17173 Fix processing of replacement pattern with named capture groups (@​mmmsssttt404)

💅 Polish

  • babel-standalone
    • #17158 Avoid warnings when re-bundling @​babel/standalone with webpack (@​liuxingbaoyu)

🏠 Internal

  • babel-parser
    • #17160 Left-value parsing cleanup (@​JLHwung)

Committers: 6

  • Babel Bot (@​babel-bot)
  • Huáng Jùnliàng (@​JLHwung)
  • Nicolò Ribaudo (@​nicolo-ribaudo)
  • Yunyoung Jordan Choi (@​jordan-choi)
  • @​liuxingbaoyu
  • @​mmmsssttt404

v7.26.9 (2025-02-14)

🐛 Bug Fix

  • babel-types
    • #17103 fix: Definition for TSPropertySignature.kind (@​liuxingbaoyu)
  • babel-generator, babel-types
    • #17062 Print TypeScript optional/definite in ClassPrivateProperty (@​jamiebuilds-signal)

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.26.10 (2025-03-11)

👓 Spec Compliance

  • babel-parser
    • #17159 Disallow decorator in array pattern (@​JLHwung)

🐛 Bug Fix

  • babel-parser, babel-template
    • #17164 Fix: always initialize ExportDeclaration attributes (@​JLHwung)
  • babel-core
    • #17142 fix: "Map maximum size exceeded" in deepClone (@​liuxingbaoyu)
  • babel-parser, babel-plugin-transform-typescript
    • #17154 Update typescript parser tests (@​JLHwung)
  • babel-traverse
    • #17151 fix: Should not evaluate vars in child scope (@​liuxingbaoyu)
  • babel-generator
    • #17153 fix: Correctly generate abstract override (@​liuxingbaoyu)
  • babel-parser
    • #17107 Fix source type detection when parsing TypeScript (@​JLHwung)
  • babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3
    • #17173 Fix processing of replacement pattern with named capture groups (@​mmmsssttt404)

💅 Polish

  • babel-standalone
    • #17158 Avoid warnings when re-bundling @​babel/standalone with webpack (@​liuxingbaoyu)

🏠 Internal

  • babel-parser
    • #17160 Left-value parsing cleanup (@​JLHwung)

v7.26.9 (2025-02-14)

🐛 Bug Fix

  • babel-types
    • #17103 fix: Definition for TSPropertySignature.kind (@​liuxingbaoyu)
  • babel-generator, babel-types
    • #17062 Print TypeScript optional/definite in ClassPrivateProperty (@​jamiebuilds-signal)

🏠 Internal

  • babel-types
    • #17130 Use .ts files with explicit reexports to solve name conflicts (@​nicolo-ribaudo)
  • babel-core
    • #17127 Do not depend on @types/gensync in Babel 7 (@​nicolo-ribaudo)

v7.26.7 (2025-01-24)

🐛 Bug Fix

  • babel-helpers, babel-preset-env, babel-runtime-corejs3
    • #17086 Make "object without properties" helpers ES6-compatible (@​tquetano-netflix)
  • babel-plugin-transform-typeof-symbol
    • #17085 fix: Correctly handle typeof in arrow functions (@​liuxingbaoyu)

... (truncated)

Commits
  • e1ce99d v7.26.10
  • 985f051 fix: "Map maximum size exceeded" in deepClone (#17142)
  • 64bca7b v7.26.9
  • 4cf5c9e [babel 8] Use @babel/types for parser's return type (#17117)
  • fd3f0a8 Do not depend on @types/gensync in Babel 7 (#17127)
  • 5315446 [babel 8] Remove babel 7-specific imports (#17111)
  • 0593941 v7.26.8
  • 1bdb1a4 Move @types/gensync to dependencies (#17105)
  • 2d95140 v7.26.7
  • d9fa47d Do not try to parse .ts configs as JSON if natively supported (#17052)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ´@dependabot rebase´.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • ´@dependabot rebase´ will rebase this PR
  • ´@dependabot recreate´ will recreate this PR, overwriting any edits that have been made to it
  • ´@dependabot merge´ will merge this PR after your CI passes on it
  • ´@dependabot squash and merge´ will squash and merge this PR after your CI passes on it
  • ´@dependabot cancel merge´ will cancel a previously requested merge and block automerging
  • ´@dependabot reopen´ will reopen this PR if it is closed
  • ´@dependabot close´ will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • ´@dependabot show ignore conditions´ will show all of the ignore conditions of the specified dependency
  • ´@dependabot ignore this major version´ will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • ´@dependabot ignore this minor version´ will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • ´@dependabot ignore this dependency´ will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Labels:
dependencies

Workflow Status:
Success

Files Changed:

Lint Results:
Lint passed successfully!

Test Summary:
All tests passed

Coverage Report:
No coverage info found

Last Commit SHA:
75ebf41

Commit Message:
Merge f1b1f84 into 38b033a

✨ Please ensure all tests and checks pass.

View PR Details

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 30, 2025

Superseded by #344.

@dependabot dependabot bot closed this Apr 30, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/development/babel/core-7.26.10 branch April 30, 2025 21:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant