Skip to content

[Snyk] Upgrade @babel/preset-env from 7.18.2 to 7.28.3 #210

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade @babel/preset-env from 7.18.2 to 7.28.3 #210

wants to merge 1 commit into from

Conversation

@nejidevelops
Copy link
Owner

@nejidevelops nejidevelops commented Nov 8, 2025

snyk-top-banner

Snyk has created this PR to upgrade @babel/preset-env from 7.18.2 to 7.28.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 57 versions ahead of your current version.

  • The recommended version was released 3 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIME-10044504		 452 Proof of Concept
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462		 452 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 452 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 452 Proof of Concept
Release notes
Package name: @babel/preset-env
  • 7.28.3 - 2025-08-14

    v7.28.3 (2025-08-14)

    👓 Spec Compliance

    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

    🐛 Bug Fix

    • babel-parser
      • #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@ easrng)
      • #17478 fix(parser): stop subscript parsing on async arrow (@ JLHwung)

    💅 Polish

    • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

    📝 Documentation

    🏠 Internal

    🔬 Output optimization

    • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

    Committers: 5

  • 7.28.0 - 2025-07-02

    v7.28.0 (2025-07-02)

    🚀 New Feature

    • babel-node
    • babel-types
    • babel-compat-data, babel-preset-env
    • babel-core, babel-parser
    • babel-generator, babel-parser
    • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
    • babel-parser, babel-traverse, babel-types
    • babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
    • babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types

    🐛 Bug Fix

    🏠 Internal

    • babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

    Committers: 5

  • 7.27.2 - 2025-05-06
  • 7.27.1 - 2025-04-30
  • 7.26.9 - 2025-02-14
  • 7.26.8 - 2025-02-08
  • 7.26.7 - 2025-01-24
  • 7.26.0 - 2024-10-25
  • 7.25.9 - 2024-10-22
  • 7.25.8 - 2024-10-10
  • 7.25.7 - 2024-10-02
  • 7.25.4 - 2024-08-22
  • 7.25.3 - 2024-07-31
  • 7.25.2 - 2024-07-30
  • 7.25.0 - 2024-07-26
  • 7.24.8 - 2024-07-11
  • 7.24.7 - 2024-06-05
  • 7.24.6 - 2024-05-24
  • 7.24.5 - 2024-04-29
  • 7.24.4 - 2024-04-03
  • 7.24.3 - 2024-03-20
  • 7.24.1 - 2024-03-19
  • 7.24.0 - 2024-02-28
  • 7.23.9 - 2024-01-25
  • 7.23.8 - 2024-01-08
  • 7.23.7 - 2023-12-29
  • 7.23.6 - 2023-12-11
  • 7.23.5 - 2023-11-29
  • 7.23.3 - 2023-11-09
  • 7.23.2 - 2023-10-11
  • 7.22.20 - 2023-09-16
  • 7.22.15 - 2023-09-04
  • 7.22.14 - 2023-08-30
  • 7.22.10 - 2023-08-07
  • 7.22.9 - 2023-07-12
  • 7.22.7 - 2023-07-06
  • 7.22.6 - 2023-07-04
  • 7.22.5 - 2023-06-08
  • 7.22.4 - 2023-05-29
  • 7.22.2 - 2023-05-26
  • 7.22.1 - 2023-05-26
  • 7.22.0 - 2023-05-26
  • 7.21.5 - 2023-04-28
  • 7.21.4 - 2023-03-31
  • 7.21.4-esm.4 - 2023-04-04
  • 7.21.4-esm.3 - 2023-04-04
  • 7.21.4-esm.2 - 2023-04-04
  • 7.21.4-esm.1 - 2023-04-04
  • 7.21.4-esm - 2023-04-04
  • 7.20.2 - 2022-11-04
  • 7.19.4 - 2022-10-10
  • 7.19.3 - 2022-09-27
  • 7.19.1 - 2022-09-14
  • 7.19.0 - 2022-09-05
  • 7.18.10 - 2022-08-01
  • 7.18.9 - 2022-07-18
  • 7.18.6 - 2022-06-27
  • 7.18.2 - 2022-05-25
from @babel/preset-env GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade @babel/preset-env from 7.18.2 to 7.28.3
8ea5c7d 
Snyk has created this PR to upgrade @babel/preset-env from 7.18.2 to 7.28.3.

See this package in npm:
@babel/preset-env

See this project in Snyk:
https://app.snyk.io/org/newtonombese1/project/3e6d2e02-40ef-4b6c-be42-f462e398c42e?utm_source=github&utm_medium=referral&page=upgrade-pr
@gemini-code-assist
Copy link

gemini-code-assist bot commented Nov 8, 2025

Summary of Changes

Hello @nejidevelops, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request, automatically generated by Snyk, focuses on enhancing the project's security posture and keeping its dependencies current by upgrading @babel/preset-env. The update moves the package from version 7.18.2 to 7.28.3, resolving multiple critical and high-severity vulnerabilities and integrating a significant number of upstream improvements.

Highlights

  • Dependency Upgrade: Upgraded the @babel/preset-env package from version 7.18.2 to 7.28.3 to incorporate the latest features, bug fixes, and security patches.
  • Security Vulnerability Resolution: This upgrade addresses several identified security vulnerabilities, including Regular Expression Denial of Service (ReDoS) and Incomplete List of Disallowed Inputs, as flagged by Snyk.
  • Version Jump: The update spans 57 versions, bringing in numerous improvements and changes from the Babel project over the past three months, including new features, bug fixes, and performance optimizations.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist[bot]
gemini-code-assist bot reviewed Nov 8, 2025
View reviewed changes
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request from Snyk upgrades @babel/preset-env from version 7.18.2 to 7.28.3 to resolve several security vulnerabilities. This is an important update for the project's security. Given the large version jump, it is critical to perform thorough testing to ensure there are no regressions or breaking changes. I have also added a comment regarding the version of @babel/core to ensure consistency across Babel packages.

package.json
"dependencies": {
"@babel/core": "^7.4.5",
"@babel/preset-env": "^7.4.5",
"@babel/preset-env": "^7.28.3",
Copy link

@gemini-code-assist gemini-code-assist bot Nov 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To ensure compatibility and prevent potential build issues, it's highly recommended to keep all related @babel packages at the same version. Since @babel/preset-env is being upgraded to ^7.28.3, @babel/core should also be updated from ^7.4.5 to match. This will prevent potential issues if node_modules or package-lock.json are ever removed and regenerated.

Recommendation:

    "@babel/core": "^7.28.3",
    "@babel/preset-env": "^7.28.3",

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@gemini-code-assist gemini-code-assist[bot] gemini-code-assist[bot] left review comments

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@nejidevelops @snyk-bot