chore(deps-dev): bump @babel/preset-env from 7.29.7 to 8.0.2 - #1689
chore(deps-dev): bump @babel/preset-env from 7.29.7 to 8.0.2#1689dependabot[bot] wants to merge 1 commit into
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
e0bec37 to
98f4357
Compare
Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.29.7 to 8.0.2. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.2/packages/babel-preset-env) --- updated-dependencies: - dependency-name: "@babel/preset-env" dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
98f4357 to
763c8e3
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 763c8e3. Configure here.
| "@babel/core": "^7.29.7", | ||
| "@babel/plugin-syntax-import-attributes": "^7.29.7", | ||
| "@babel/preset-env": "^7.29.7", | ||
| "@babel/preset-env": "^8.0.2", |
There was a problem hiding this comment.
ESM left untransformed for CJS build
High Severity
@babel/preset-env v8 changes modules: "auto" to assume ESM when the caller does not opt out. .babelrc.cjs relies on that default, while build rewrites the output package to "type": "commonjs" for pkg. Source import/export can remain ESM under a CJS package type, breaking dist binaries.
Reviewed by Cursor Bugbot for commit 763c8e3. Configure here.


Bumps @babel/preset-env from 7.29.7 to 8.0.2.
Release notes
Sourced from @babel/preset-env's releases.
... (truncated)
Changelog
Sourced from @babel/preset-env's changelog.
... (truncated)
Commits
73940a0v8.0.259a63a6Update@babel/preset-modulesand polyfill packages (#18081)b4be199v8.0.1b68b1cbActually removepreset-env'suseBuiltIns(#18079)cd96c47chore(pkg): set@babel/corepeer deps to ^8.0.0 (#18076)7dc825av8.0.0004f4b4Fallback to assuming ESM support withmodules: auto(#18069)73bceefv8.0.0-rc.6c6d71f3EnablestrictFunctionTypes(#17946)dc91f90v8.0.0-rc.5Note
Medium Risk
Major dev-toolchain change: preset-env 8 peers on
@babel/core8 but core/cli/register are still 7.x, which can breaknpm run buildor subtly change transpilation until aligned or verified in CI.Overview
Bumps the dev dependency
@babel/preset-envfrom 7.29.7 to 8.0.2 inpackage.json, with a matchingpackage-lock.jsonrefresh that pulls in the Babel 8 preset/plugin tree (8.x transform plugins, updated@babel/preset-modules0.2.0, and newer polyfill helpers such asbabel-plugin-polyfill-corejs31.0.0).This is a major preset-env upgrade (Babel 8 line): preset-env now expects
@babel/core^8 as a peer, while the repo still pins@babel/core,@babel/cli, and@babel/registerat 7.29.7. No changes to.babelrc.cjs(still a plainpresets: ['@babel/preset-env']with Node 20.16 targets and nouseBuiltIns).Reviewers should confirm
npm run build(and CI binary builds that install global@babel/preset-env) still succeed and that compile output is unchanged.Reviewed by Cursor Bugbot for commit 763c8e3. Bugbot is set up for automated code reviews on this repo. Configure here.