[Snyk] Upgrade @babel/preset-env from 7.4.5 to 7.28.6#279
[Snyk] Upgrade @babel/preset-env from 7.4.5 to 7.28.6#279nejidevelops wants to merge 1 commit intomasterfrom
Conversation
Snyk has created this PR to upgrade @babel/preset-env from 7.4.5 to 7.28.6. See this package in npm: @babel/preset-env See this project in Snyk: https://app.snyk.io/org/mohammadnewton/project/6cf23f16-076d-437a-86a8-033e4525bca6?utm_source=github&utm_medium=referral&page=upgrade-pr
Summary of ChangesHello @nejidevelops, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request focuses on enhancing the project's security posture and maintaining dependency health by performing a significant version bump for Highlights
🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console. Changelog
Activity
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request upgrades @babel/preset-env to version 7.28.6, which is a significant update that resolves multiple security vulnerabilities. The change is beneficial and approved. However, to ensure better compatibility and maintainability, it's recommended to also update the version of @babel/core to align with @babel/preset-env.
| "dependencies": { | ||
| "@babel/core": "^7.4.5", | ||
| "@babel/preset-env": "^7.4.5", | ||
| "@babel/preset-env": "^7.28.6", |
There was a problem hiding this comment.
To maintain consistency and avoid potential compatibility issues, it's a good practice to keep related Babel packages at the same version. I recommend updating @babel/core to match the new version of @babel/preset-env. You can replace lines 12 and 13 with the following:
"@babel/core": "^7.28.6",
"@babel/preset-env": "^7.28.6",2 participants
Snyk has created this PR to upgrade @babel/preset-env from 7.4.5 to 7.28.6.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 127 versions ahead of your current version.
The recommended version was released 25 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-BABELHELPERS-9397697
SNYK-JS-BABELTRAVERSE-5962462
SNYK-JS-LODASH-1040724
SNYK-JS-LODASH-567746
SNYK-JS-SEMVER-3247795
SNYK-JS-SEMVER-3247795
SNYK-JS-BROWSERSLIST-1090194
SNYK-JS-JSON5-3182856
SNYK-JS-LODASH-1018905
SNYK-JS-LODASH-15053838
SNYK-JS-PATHPARSE-1077067
Release notes
Package name: @babel/preset-env
-
7.28.6 - 2026-01-12
- #17589 Improve Unicode handling in code-frame tokenizer (@ JLHwung)
- #17556 fix:
- #17538 fix: Keep jsx comments (@ liuxingbaoyu)
- #17606 Polish(standalone): improve message on invalid preset/plugin (@ JLHwung)
- #17580 Allow Babel 8 in compatible Babel 7 plugins (@ nicolo-ribaudo)
- #17555 perf: Use lighter traversal for jsx
- Babel Bot (@ babel-bot)
- Eliot Pontarelli (@ kolvian)
- Huáng Jùnliàng (@ JLHwung)
- Kadhirash Sivakumar (@ kadhirash)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
-
7.28.5 - 2025-10-23
- #17446 Allow
- #17501 fix: update identifier to unicode 17 (@ fisker)
- #17534 Allow mixing private destructuring and rest (@ CO0Ki3)
- #17521 Improve
- #17491 fix: improve ts-only declaration parsing (@ JLHwung)
- #17519 fix:
- #17503 Fix
- #17504 fix: ensure scope.push register in anonymous fn (@ JLHwung)
- #17494 Type checking babel-types scripts (@ JLHwung)
- #17490 Faster finding of locations in
- Babel Bot (@ babel-bot)
- Byeongho Yoo (@ youthfulhps)
- Huáng Jùnliàng (@ JLHwung)
- Hyeon Dokko (@ CO0Ki3)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ Olexandr88
- @ liuxingbaoyu
- fisker Cheung (@ fisker)
-
7.28.3 - 2025-08-14
- #17443 [static blocks] Do not inject new static fields after static code (@ nicolo-ribaudo)
- #17465 fix(parser/typescript): parse
- #17478 fix(parser): stop subscript parsing on async arrow (@ JLHwung)
- #17363 Do not save last yield in call in temp var (@ nicolo-ribaudo)
- #17448 move eslint-{parser,plugin} docs to the website (@ JLHwung)
- #17454 Enable type checking for
- #17444 Optimize do expression output (@ JLHwung)
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Jam Balaya (@ JamBalaya56562)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- easrng (@ easrng)
-
7.28.0 - 2025-07-02
-
7.27.2 - 2025-05-06
-
7.27.1 - 2025-04-30
-
7.26.9 - 2025-02-14
-
7.26.8 - 2025-02-08
-
7.26.7 - 2025-01-24
-
7.26.0 - 2024-10-25
-
7.25.9 - 2024-10-22
-
7.25.8 - 2024-10-10
-
7.25.7 - 2024-10-02
-
7.25.4 - 2024-08-22
-
7.25.3 - 2024-07-31
-
7.25.2 - 2024-07-30
-
7.25.0 - 2024-07-26
-
7.24.8 - 2024-07-11
-
7.24.7 - 2024-06-05
-
7.24.6 - 2024-05-24
-
7.24.5 - 2024-04-29
-
7.24.4 - 2024-04-03
-
7.24.3 - 2024-03-20
-
7.24.1 - 2024-03-19
-
7.24.0 - 2024-02-28
-
7.23.9 - 2024-01-25
-
7.23.8 - 2024-01-08
-
7.23.7 - 2023-12-29
-
7.23.6 - 2023-12-11
-
7.23.5 - 2023-11-29
-
7.23.3 - 2023-11-09
-
7.23.2 - 2023-10-11
-
7.22.20 - 2023-09-16
-
7.22.15 - 2023-09-04
-
7.22.14 - 2023-08-30
-
7.22.10 - 2023-08-07
-
7.22.9 - 2023-07-12
-
7.22.7 - 2023-07-06
-
7.22.6 - 2023-07-04
-
7.22.5 - 2023-06-08
-
7.22.4 - 2023-05-29
-
7.22.2 - 2023-05-26
-
7.22.1 - 2023-05-26
-
7.22.0 - 2023-05-26
-
7.21.5 - 2023-04-28
-
7.21.4 - 2023-03-31
-
7.21.4-esm.4 - 2023-04-04
-
7.21.4-esm.3 - 2023-04-04
-
7.21.4-esm.2 - 2023-04-04
-
7.21.4-esm.1 - 2023-04-04
-
7.21.4-esm - 2023-04-04
-
7.20.2 - 2022-11-04
-
7.19.4 - 2022-10-10
-
7.19.3 - 2022-09-27
-
7.19.1 - 2022-09-14
-
7.19.0 - 2022-09-05
-
7.18.10 - 2022-08-01
-
7.18.9 - 2022-07-18
-
7.18.6 - 2022-06-27
-
7.18.2 - 2022-05-25
-
7.18.0 - 2022-05-19
-
7.17.12 - 2022-05-16
-
7.17.10 - 2022-04-29
-
7.16.11 - 2022-01-20
-
7.16.10 - 2022-01-19
-
7.16.8 - 2022-01-10
-
7.16.7 - 2021-12-31
-
7.16.5 - 2021-12-13
-
7.16.4 - 2021-11-16
-
7.16.0 - 2021-10-29
-
7.15.8 - 2021-10-06
-
7.15.6 - 2021-09-09
-
7.15.4 - 2021-09-02
-
7.15.0 - 2021-08-04
-
7.14.9 - 2021-08-01
-
7.14.8 - 2021-07-20
-
7.14.7 - 2021-06-21
-
7.14.5 - 2021-06-09
-
7.14.4 - 2021-05-28
-
7.14.2 - 2021-05-12
-
7.14.1 - 2021-05-04
-
7.14.0 - 2021-04-29
-
7.13.15 - 2021-04-08
-
7.13.12 - 2021-03-22
-
7.13.10 - 2021-03-08
-
7.13.9 - 2021-03-01
-
7.13.8 - 2021-02-26
-
7.13.5 - 2021-02-23
-
7.13.0 - 2021-02-22
-
7.12.17 - 2021-02-18
-
7.12.16 - 2021-02-11
-
7.12.13 - 2021-02-03
-
7.12.11 - 2020-12-15
-
7.12.10 - 2020-12-09
-
7.12.7 - 2020-11-20
-
7.12.1 - 2020-10-15
-
7.12.0 - 2020-10-14
-
7.11.5 - 2020-08-31
-
7.11.0 - 2020-07-30
-
7.10.4 - 2020-06-30
-
7.10.3 - 2020-06-19
-
7.10.2 - 2020-05-30
-
7.10.1 - 2020-05-27
-
7.10.0 - 2020-05-26
-
7.9.6 - 2020-04-29
-
7.9.5 - 2020-04-07
-
7.9.0 - 2020-03-20
-
7.8.7 - 2020-03-05
-
7.8.6 - 2020-02-27
-
7.8.4 - 2020-01-30
-
7.8.3 - 2020-01-13
-
7.8.2 - 2020-01-12
-
7.8.0 - 2020-01-12
-
7.7.7 - 2019-12-19
-
7.7.6 - 2019-12-07
-
7.7.5 - 2019-12-06
-
7.7.4 - 2019-11-22
-
7.7.1 - 2019-11-05
-
7.7.0 - 2019-11-05
-
7.6.3 - 2019-10-08
-
7.6.2 - 2019-09-23
-
7.6.0 - 2019-09-06
-
7.5.5 - 2019-07-17
-
7.5.4 - 2019-07-09
-
7.5.3 - 2019-07-09
-
7.5.2 - 2019-07-08
-
7.5.0 - 2019-07-04
-
7.4.5 - 2019-05-21
from @babel/preset-env GitHub release notesv7.28.6 (2026-01-12)
Thanks @ kadhirash and @ kolvian for your first PRs!
🐛 Bug Fix
babel-cli,babel-code-frame,babel-core,babel-helper-check-duplicate-nodes,babel-helper-fixtures,babel-helper-plugin-utils,babel-node,babel-plugin-transform-flow-comments,babel-plugin-transform-modules-commonjs,babel-plugin-transform-property-mutators,babel-preset-env,babel-traverse,babel-typesbabel-plugin-transform-regeneratortransform-regeneratorcorrectly handles scope (@ liuxingbaoyu)babel-plugin-transform-react-jsx💅 Polish
babel-core,babel-standalone🏠 Internal
babel-plugin-bugfix-v8-static-class-fields-redefine-readonly,babel-plugin-proposal-decorators,babel-plugin-proposal-import-attributes-to-assertions,babel-plugin-proposal-import-wasm-source,babel-plugin-syntax-async-do-expressions,babel-plugin-syntax-decorators,babel-plugin-syntax-destructuring-private,babel-plugin-syntax-do-expressions,babel-plugin-syntax-explicit-resource-management,babel-plugin-syntax-export-default-from,babel-plugin-syntax-flow,babel-plugin-syntax-function-bind,babel-plugin-syntax-function-sent,babel-plugin-syntax-import-assertions,babel-plugin-syntax-import-attributes,babel-plugin-syntax-import-defer,babel-plugin-syntax-import-source,babel-plugin-syntax-jsx,babel-plugin-syntax-module-blocks,babel-plugin-syntax-optional-chaining-assign,babel-plugin-syntax-partial-application,babel-plugin-syntax-pipeline-operator,babel-plugin-syntax-throw-expressions,babel-plugin-syntax-typescript,babel-plugin-transform-async-generator-functions,babel-plugin-transform-async-to-generator,babel-plugin-transform-class-properties,babel-plugin-transform-class-static-block,babel-plugin-transform-dotall-regex,babel-plugin-transform-duplicate-named-capturing-groups-regex,babel-plugin-transform-explicit-resource-management,babel-plugin-transform-exponentiation-operator,babel-plugin-transform-json-strings,babel-plugin-transform-logical-assignment-operators,babel-plugin-transform-nullish-coalescing-operator,babel-plugin-transform-numeric-separator,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-catch-binding,babel-plugin-transform-optional-chaining,babel-plugin-transform-private-methods,babel-plugin-transform-private-property-in-object,babel-plugin-transform-regexp-modifiers,babel-plugin-transform-unicode-property-regex,babel-plugin-transform-unicode-sets-regex🏃♀️ Performance
babel-plugin-transform-react-jsx__source,__self(@ liuxingbaoyu)Committers: 7
v7.28.5 (2025-10-23)
Thank you @ CO0Ki3, @ Olexandr88, and @ youthfulhps for your first PRs!
👓 Spec Compliance
babel-parserRuntime Errors for Function Call Assignment Targets(@ liuxingbaoyu)babel-helper-validator-identifier🐛 Bug Fix
babel-plugin-proposal-destructuring-privatebabel-parser@ babel/parsererror typing (@ JLHwung)babel-plugin-proposal-discard-binding,babel-plugin-transform-destructuringrestcorrectly returns plain array (@ liuxingbaoyu)babel-helper-create-class-features-plugin,babel-helper-member-expression-to-functions,babel-plugin-transform-block-scoping,babel-plugin-transform-optional-chaining,babel-traverse,babel-typesJSXIdentifierhandling inisReferencedIdentifier(@ JLHwung)babel-traverse🏠 Internal
babel-types🏃♀️ Performance
babel-corebuildCodeFrameError(@ liuxingbaoyu)Committers: 8
v7.28.3 (2025-08-14)
👓 Spec Compliance
babel-helper-create-class-features-plugin,babel-plugin-proposal-decorators,babel-plugin-transform-class-static-block,babel-preset-env🐛 Bug Fix
babel-parserimport("./a", {with:{},})(@ easrng)💅 Polish
babel-plugin-transform-regenerator,babel-plugin-transform-runtime📝 Documentation
🏠 Internal
scriptsandbabel-worker.cjs(@ JLHwung)🔬 Output optimization
babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressionsCommitters: 5
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: