[Snyk] Upgrade @babel/core from 7.26.7 to 7.27.1 #400

snyk-io · 2025-06-05T06:08:02Z

Snyk has created this PR to upgrade @babel/core from 7.26.7 to 7.27.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 4 versions ahead of your current version.
The recommended version was released a month ago.

Release notes

Package name: @babel/core

7.27.1 - 2025-04-30
v7.27.1 (2025-04-30)

Thanks @ kermanx and @ woaitsAryan for your first PRs!

👓 Spec Compliance
- babel-parser
  - #17254 Allow using of as lexical declaration within for (@ JLHwung)
  - #17230 Disallow get/set in TSPropertySignature (@ JLHwung)
- babel-parser, babel-types
  - #17193 Stricter TSImportType options parsing (@ JLHwung)
🐛 Bug Fix
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  - #17137 fix: do expressions should allow early exit (@ kermanx)
- babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  - #17251 Fix: propagate argument evaluation errors through async promise chain (@ magic-akari)
- babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  - #17231 fix apply()/call() annotated as pure (@ Lacsw)
- babel-helper-fixtures, babel-parser
  - #17233 Create ChainExpression within TSInstantiationExpression (@ JLHwung)
- babel-generator, babel-parser
  - #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@ JLHwung)
- babel-parser
  - #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@ JLHwung)
  - #17080 Fix start of TSParameterProperty (@ JLHwung)
- babel-compat-data, babel-preset-env
  - #17228 Update firefox bugfix compat data (@ JLHwung)
- babel-traverse
  - #17156 fix: Objects and arrays with multiple references should not be evaluated (@ liuxingbaoyu)
- babel-generator
  - #17216 Fix: support const type parameter in generator (@ JLHwung)
💅 Polish
- babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
  - #17221 Reduce generated names size for the 10th-11th (@ nicolo-ribaudo)
🏠 Internal
- babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17263 Remove unused regenerator-runtime dep in @ babel/runtime (@ nicolo-ribaudo)
- babel-compat-data, babel-preset-env
  - #17256 Tune plugin compat data (@ JLHwung)
- babel-compat-data, babel-standalone
  - #17236 migrate babel-compat-data build script to mjs (@ JLHwung)
- babel-register
  - #16844 Migrate @ babel/register to cts (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17205 Inline regenerator in the relevant packages (@ nicolo-ribaudo)
- All packages
  - #17207 Enforce node protocol import (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  - #16538 Reduce interopRequireWildcard size (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17213 Reduce regeneratorRuntime size (@ liuxingbaoyu)
Committers: 9
- Aryan Bharti (@ woaitsAryan)
- Babel Bot (@ babel-bot)
- Frolov Roman (@ Lacsw)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- @ magic-akari
- _Kerman (@ kermanx)
- fisker Cheung (@ fisker)
7.26.10 - 2025-03-11
v7.26.10 (2025-03-11)

Thanks @ jordan-choi and @ mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance
- babel-parser
  - #17159 Disallow decorator in array pattern (@ JLHwung)
🐛 Bug Fix
- babel-parser, babel-template
  - #17164 Fix: always initialize ExportDeclaration attributes (@ JLHwung)
- babel-core
  - #17142 fix: "Map maximum size exceeded" in deepClone (@ liuxingbaoyu)
- babel-parser, babel-plugin-transform-typescript
  - #17154 Update typescript parser tests (@ JLHwung)
- babel-traverse
  - #17151 fix: Should not evaluate vars in child scope (@ liuxingbaoyu)
- babel-generator
  - #17153 fix: Correctly generate abstract override (@ liuxingbaoyu)
- babel-parser
  - #17107 Fix source type detection when parsing TypeScript (@ JLHwung)
- babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3
  - #17173 Fix processing of replacement pattern with named capture groups (@ mmmsssttt404)
💅 Polish
- babel-standalone
  - #17158 Avoid warnings when re-bundling @ babel/standalone with webpack (@ liuxingbaoyu)
🏠 Internal
- babel-parser
  - #17160 Left-value parsing cleanup (@ JLHwung)
Committers: 6
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Yunyoung Jordan Choi (@ jordan-choi)
- @ liuxingbaoyu
- @ mmmsssttt404
7.26.9 - 2025-02-14
v7.26.9 (2025-02-14)

🐛 Bug Fix
- babel-types
  - #17103 fix: Definition for TSPropertySignature.kind (@ liuxingbaoyu)
- babel-generator, babel-types
  - #17062 Print TypeScript optional/definite in ClassPrivateProperty (@ jamiebuilds-signal)
🏠 Internal
- babel-types
  - #17130 Use .ts files with explicit reexports to solve name conflicts (@ nicolo-ribaudo)
- babel-core
  - #17127 Do not depend on @ types/gensync in Babel 7 (@ nicolo-ribaudo)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Jamie Kyle (@ jamiebuilds-signal)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.26.8 - 2025-02-08
v7.26.8 (2025-02-08)

🏠 Internal
- babel-preset-env
  - #17097 Update dependency babel-plugin-polyfill-corejs3 to ^0.11.0
7.26.7 - 2025-01-24
v7.26.7 (2025-01-24)

Thanks @ branchseer and @ tquetano-netflix for your first PRs!

🐛 Bug Fix
- babel-helpers, babel-preset-env, babel-runtime-corejs3
  - #17086 Make "object without properties" helpers ES6-compatible (@ tquetano-netflix)
- babel-plugin-transform-typeof-symbol
  - #17085 fix: Correctly handle typeof in arrow functions (@ liuxingbaoyu)
- babel-parser
  - #17079 Respect ranges option in estree method value (@ JLHwung)
- babel-core
  - #17052 Do not try to parse .ts configs as JSON if natively supported (@ nicolo-ribaudo)
- babel-plugin-transform-typescript
  - #17050 fix: correctly resolve references to non-constant enum members (@ branchseer)
- babel-plugin-transform-typescript, babel-traverse, babel-types
  - #17025 fix: Remove type-only import x = y.z (@ liuxingbaoyu)
Committers: 6
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Tony Quetano (@ tquetano-netflix)
- @ branchseer
- @ liuxingbaoyu

from @babel/core GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Podsumowanie wygenerowane przez Sourcery

Prace porządkowe:

Podniesienie wersji zależności @babel/core do 7.27.1

Original summary in English

Summary by Sourcery

Chores:

Bump @babel/core dependency to 7.27.1

Snyk has created this PR to upgrade @babel/core from 7.26.7 to 7.27.1. See this package in npm: @babel/core See this project in Snyk: https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr

aviator-app · 2025-06-05T06:08:06Z

Current Aviator status

Aviator will automatically update this comment as the status of the PR changes.
Comment /aviator refresh to force Aviator to re-examine your PR (or learn about other /aviator commands).

This PR was merged manually (without Aviator). Merging manually can negatively impact the performance of the queue. Consider using Aviator next time.

See the real-time status of this PR on the Aviator webapp.

Use the Aviator Chrome Extension to see the status of your PR within GitHub.

aviator-app · 2025-06-05T06:08:06Z

Aviator Changeset actions:

View Changeset dashboard - Open Changeset Dashboard on Aviator

semanticdiff-com · 2025-06-05T06:08:06Z

Review changes with

Changed Files

File	Status
package-lock.json	67% smaller
package.json	0% smaller

naming-conventions-bot · 2025-06-05T06:08:07Z

Please follow naming conventions! 😿

coderabbitai · 2025-06-05T06:08:10Z

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Explain this complex logic.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai explain this code block.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and explain its main purpose.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

sourcery-ai · 2025-06-05T06:08:13Z

Przewodnik Recenzenta

Uaktualnij zależność kompilatora Babel projektu, podnosząc wersję @babel/core z 7.26.7 do 7.27.1, aby zapewnić uwzględnienie najnowszych poprawek błędów i ulepszeń.

Zmiany na Poziomie Pliku

Zmiana	Szczegóły	Pliki
Aktualizacja wersji @babel/core	Zaktualizowano wpis devDependencies dla @babel/core z “^7.26.7” na “^7.27.1”	`package.json`

Porady i polecenia

Interakcja z Sourcery

Wywołanie nowej recenzji: Skomentuj @sourcery-ai review w żądaniu pull request.
Kontynuowanie dyskusji: Odpowiadaj bezpośrednio na komentarze recenzji Sourcery.
Generowanie zgłoszenia GitHub z komentarza recenzji: Poproś Sourcery o utworzenie
zgłoszenia z komentarza recenzji, odpowiadając na niego. Możesz również odpowiedzieć na
komentarz recenzji za pomocą @sourcery-ai issue, aby utworzyć z niego zgłoszenie.
Generowanie tytułu żądania pull request: Wpisz @sourcery-ai w dowolnym miejscu w tytule
żądania pull request, aby wygenerować tytuł w dowolnym momencie. Możesz również skomentować
@sourcery-ai title w żądaniu pull request, aby (ponownie) wygenerować tytuł w dowolnym momencie.
Generowanie podsumowania żądania pull request: Wpisz @sourcery-ai summary w dowolnym miejscu
w treści żądania pull request, aby wygenerować podsumowanie PR w dowolnym momencie, dokładnie tam, gdzie
chcesz. Możesz również skomentować @sourcery-ai summary w żądaniu pull request, aby
(ponownie) wygenerować podsumowanie w dowolnym momencie.
Generowanie przewodnika recenzenta: Skomentuj @sourcery-ai guide w żądaniu pull
request, aby (ponownie) wygenerować przewodnik recenzenta w dowolnym momencie.
Rozwiązywanie wszystkich komentarzy Sourcery: Skomentuj @sourcery-ai resolve w żądaniu
pull request, aby rozwiązać wszystkie komentarze Sourcery. Przydatne, jeśli wszystkie komentarze
zostały już uwzględnione i nie chcesz ich więcej widzieć.
Odrzucanie wszystkich recenzji Sourcery: Skomentuj @sourcery-ai dismiss w żądaniu pull
request, aby odrzucić wszystkie istniejące recenzje Sourcery. Szczególnie przydatne, jeśli
chcesz zacząć od nowa z nową recenzją - nie zapomnij skomentować
@sourcery-ai review, aby wywołać nową recenzję!

Dostosowywanie Twojego Doświadczenia

Uzyskaj dostęp do swojego panelu, aby:

Włączyć lub wyłączyć funkcje recenzji, takie jak podsumowanie żądania pull request generowane przez Sourcery,
przewodnik recenzenta i inne.
Zmienić język recenzji.
Dodawać, usuwać lub edytować niestandardowe instrukcje recenzji.
Dostosować inne ustawienia recenzji.

Uzyskiwanie Pomocy

Skontaktuj się z naszym zespołem wsparcia w przypadku pytań lub opinii.
Odwiedź naszą dokumentację, aby uzyskać szczegółowe przewodniki i informacje.
Bądź w kontakcie z zespołem Sourcery, obserwując nas na X/Twitter, LinkedIn lub GitHub.

Original review guide in English

Reviewer's Guide

Upgrade the project's Babel compiler dependency by bumping @babel/core from version 7.26.7 to 7.27.1 to ensure the latest bug fixes and improvements are included.

File-Level Changes

Change	Details	Files
Bump @babel/core version	Updated devDependencies entry for @babel/core from “^7.26.7” to “^7.27.1”	`package.json`

Tips and commands

Interacting with Sourcery

Trigger a new review: Comment @sourcery-ai review on the pull request.
Continue discussions: Reply directly to Sourcery's review comments.
Generate a GitHub issue from a review comment: Ask Sourcery to create an
issue from a review comment by replying to it. You can also reply to a
review comment with @sourcery-ai issue to create an issue from it.
Generate a pull request title: Write @sourcery-ai anywhere in the pull
request title to generate a title at any time. You can also comment
@sourcery-ai title on the pull request to (re-)generate the title at any time.
Generate a pull request summary: Write @sourcery-ai summary anywhere in
the pull request body to generate a PR summary at any time exactly where you
want it. You can also comment @sourcery-ai summary on the pull request to
(re-)generate the summary at any time.
Generate reviewer's guide: Comment @sourcery-ai guide on the pull
request to (re-)generate the reviewer's guide at any time.
Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
pull request to resolve all Sourcery comments. Useful if you've already
addressed all the comments and don't want to see them anymore.
Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
request to dismiss all existing Sourcery reviews. Especially useful if you
want to start fresh with a new review - don't forget to comment
@sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

Enable or disable review features such as the Sourcery-generated pull request
summary, the reviewer's guide, and others.
Change the review language.
Add, remove or edit custom review instructions.
Adjust other review settings.

Getting Help

Contact our support team for questions or feedback.
Visit our documentation for detailed guides and information.
Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

github-actions · 2025-06-05T06:08:15Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/@babel/core

7.27.4

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

npm/@babel/generator

7.27.5

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

npm/@babel/helper-module-transforms

7.27.3

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

npm/@babel/helpers

7.27.4

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

npm/@babel/parser

7.27.5

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

npm/@babel/template

7.27.2

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

npm/@babel/traverse

7.27.4

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

npm/@babel/types

7.27.3

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

npm/@babel/core

^7.27.1

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 6	Found 15/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	25 existing vulnerabilities detected

Scanned Files

package-lock.json
package.json

github-actions

LGTM 👍

deepsource-io · 2025-06-05T06:08:24Z

Here's the code health analysis summary for commits 4890a73..63cb942. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
JavaScript	✅ Success		View Check ↗
PHP	✅ Success		View Check ↗
Test coverage	⚠️ Artifact not reported	Timed out: Artifact was never reported	View Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

mergify · 2025-06-05T06:08:38Z

Merge Protections

Your pull request matches the following merge protections and will not be merged until they are valid.

🟢 Do not merge outdated PRs

Wonderful, this rule succeeded.

Make sure PRs are almost up to date before merging

#commits-behind <= 10

snyk-io · 2025-06-05T06:19:10Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

reisene · 2025-06-05T06:20:24Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

sonarqubecloud · 2025-06-09T12:17:54Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions

LGTM 👍

pull-request-size bot added the size/XS label Jun 5, 2025

github-actions bot added AnyChange release root labels Jun 5, 2025

github-actions bot reviewed Jun 5, 2025

View reviewed changes

Automated Gulp build changes

83f07e0

github-actions bot approved these changes Jun 5, 2025

View reviewed changes

Merge branch 'main' into snyk-upgrade-5fff79d69eb19929442cfefa22dc1b52

63cb942

github-actions bot reviewed Jun 9, 2025

View reviewed changes

mergify bot merged commit 0df2d58 into main Jun 9, 2025
26 of 44 checks passed

mergify bot deleted the snyk-upgrade-5fff79d69eb19929442cfefa22dc1b52 branch June 9, 2025 12:19

[Snyk] Upgrade @babel/core from 7.26.7 to 7.27.1 #400

[Snyk] Upgrade @babel/core from 7.26.7 to 7.27.1 #400

Uh oh!

Conversation

snyk-io bot commented Jun 5, 2025 • edited by sourcery-ai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Snyk has created this PR to upgrade @babel/core from 7.26.7 to 7.27.1.

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 9

v7.26.10 (2025-03-11)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 6

v7.26.9 (2025-02-14)

🐛 Bug Fix

🏠 Internal

Committers: 5

v7.26.8 (2025-02-08)

🏠 Internal

v7.26.7 (2025-01-24)

🐛 Bug Fix

Committers: 6

Podsumowanie wygenerowane przez Sourcery

Summary by Sourcery

Uh oh!

aviator-app bot commented Jun 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Current Aviator status

Uh oh!

aviator-app bot commented Jun 5, 2025

Uh oh!

semanticdiff-com bot commented Jun 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

naming-conventions-bot bot commented Jun 5, 2025

Uh oh!

coderabbitai bot commented Jun 5, 2025

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (.coderabbit.yaml)

Documentation and Community

Uh oh!

sourcery-ai bot commented Jun 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Przewodnik Recenzenta

Zmiany na Poziomie Pliku

Interakcja z Sourcery

Dostosowywanie Twojego Doświadczenia

Uzyskiwanie Pomocy

Reviewer's Guide

File-Level Changes

Interacting with Sourcery

Customizing Your Experience

Getting Help

Uh oh!

github-actions bot commented Jun 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

deepsource-io bot commented Jun 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Analysis Summary

Uh oh!

mergify bot commented Jun 5, 2025

Merge Protections

snyk-io bot commented Jun 5, 2025 •

edited by sourcery-ai bot

Loading

aviator-app bot commented Jun 5, 2025 •

edited

Loading

semanticdiff-com bot commented Jun 5, 2025 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)

sourcery-ai bot commented Jun 5, 2025 •

edited

Loading

github-actions bot commented Jun 5, 2025 •

edited

Loading

deepsource-io bot commented Jun 5, 2025 •

edited

Loading

snyk-io bot commented Jun 5, 2025 •

edited

Loading

reisene commented Jun 5, 2025 •

edited

Loading