Skip to content

chore(deps-dev): bump @babel/cli from 7.29.7 to 8.0.4 - #1711

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/babel/cli-8.0.4
Open

chore(deps-dev): bump @babel/cli from 7.29.7 to 8.0.4#1711
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/babel/cli-8.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps @babel/cli from 7.29.7 to 8.0.4.

Release notes

Sourced from @​babel/cli's releases.

v8.0.4 (2026-07-09)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-typescript
  • babel-generator, babel-parser, babel-plugin-transform-typescript

🐛 Bug Fix

🏠 Internal

  • babel-helper-validator-identifier

Committers: 4

v8.0.3 (2026-06-27)

🐛 Bug Fix

  • babel-core, babel-plugin-syntax-typescript
  • babel-standalone

Committers: 2

v8.0.2 (2026-06-18)

🐛 Bug Fix

  • Other
  • babel-helper-validator-identifier

🏠 Internal

  • babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

Committers: 2

... (truncated)

Changelog

Sourced from @​babel/cli's changelog.

v8.0.4 (2026-07-09)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-typescript
  • babel-generator, babel-parser, babel-plugin-transform-typescript

🐛 Bug Fix

🏠 Internal

  • babel-helper-validator-identifier

v8.0.3 (2026-06-27)

🐛 Bug Fix

  • babel-core, babel-plugin-syntax-typescript
  • babel-standalone

v8.0.2 (2026-06-18)

🐛 Bug Fix

  • Other
  • babel-helper-validator-identifier

🏠 Internal

  • babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

v8.0.1 (2026-06-17)

💥 Breaking Change

  • babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

v8.0.0 (2026-06-16)

👓 Spec Compliance

💥 Breaking Change

  • babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • babel-parser

... (truncated)

Commits


Note

Medium Risk
Major-version bump of the compile CLI with a peer dependency on @babel/core 8 while the project still uses Babel 7 core; build or install behavior could change until Babel is aligned.

Overview
Bumps the dev dependency @babel/cli from 7.29.7 to 8.0.4 in package.json, with matching lockfile churn for CLI 8’s dependency tree (e.g. chokidar 5, glob 13, commander 14).

CLI 8 declares a peer dependency on @babel/core ^8.0.0, while this repo still pins @babel/core and related Babel 7 packages at ^7.29.7. The build and build-migrations scripts still invoke babel the same way; reviewers should confirm npm ci / npm run build succeed and watch for peer-dep warnings.

The lockfile also drops the babel-external-helpers CLI entry that shipped with older @babel/cli.

Reviewed by Cursor Bugbot for commit 368e2f0. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 21, 2026
@socket-security

socket-security Bot commented Jul 21, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​babel/​cli@​7.29.7 ⏵ 8.0.4100 +11007697 +3100

View full report

Bumps [@babel/cli](https://github.com/babel/babel/tree/HEAD/packages/babel-cli) from 7.29.7 to 8.0.4.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.4/packages/babel-cli)

---
updated-dependencies:
- dependency-name: "@babel/cli"
  dependency-version: 8.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/babel/cli-8.0.4 branch from cce40a8 to 368e2f0 Compare August 13, 2026 13:57
@dependabot
dependabot Bot had a problem deploying to windows-code-signing August 13, 2026 13:57 Error

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 368e2f0. Configure here.

Comment thread package.json
},
"devDependencies": {
"@babel/cli": "^7.29.7",
"@babel/cli": "^8.0.4",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Babel 8 CLI / Core 7 mismatch

High Severity

@babel/cli is bumped to ^8.0.4, which peers on @babel/core ^8.0.0, while @babel/core, @babel/preset-env, @babel/register, and @babel/plugin-syntax-import-attributes stay on ^7.29.7. That unmet peer breaks the supported Babel stack used by npm run build and all create-*-dist release scripts.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 368e2f0. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants