[Snyk] Upgrade @babel/parser from 7.23.9 to 7.28.0 #648

dorgamliel-snyk · 2025-07-29T22:21:47Z

Snyk has created this PR to upgrade @babel/parser from 7.23.9 to 7.28.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 31 versions ahead of your current version.
The recommended version was released a month ago.

Release notes

Package name: @babel/parser

7.28.0 - 2025-07-02
v7.28.0 (2025-07-02)

🚀 New Feature
- babel-node
  - #17147 Support top level await in node repl (@ liuxingbaoyu)
- babel-types
  - #17258 feat(matchesPattern): support super/private/meta (@ JLHwung)
- babel-compat-data, babel-preset-env
  - #17355 Add explicit resource management to preset-env (@ JLHwung)
- babel-core, babel-parser
  - #17390 Support sourceType: "commonjs" (@ JLHwung)
- babel-generator, babel-parser
  - #17346 Materialize explicitResourceManagement parser plugin (@ JLHwung)
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  - #17391 LVal coverage updates (Part 2) (@ JLHwung)
- babel-parser, babel-traverse, babel-types
  - #17378 Accept bigints in t.bigIntLiteral factory (@ JLHwung)
- babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  - #17277 Transform discard binding (@ JLHwung)
- babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
  - #17163 Parse discard binding (@ JLHwung)
🐛 Bug Fix
- babel-helper-globals, babel-plugin-transform-classes, babel-traverse
  - #17297 Create babel-helper-globals (@ JLHwung)
- babel-types
  - #17009 feature: TSTypeOperator: keyof (#16799) (@ coderaiser)
🏠 Internal
- babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  - #17403 Update babel-polyfill packages (@ nicolo-ribaudo)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
7.27.7 - 2025-06-26
v7.27.7 (2025-06-26)

Thanks @ arthur-mountain and @ evankanderson for your first PRs!

👓 Spec Compliance
- babel-parser, babel-plugin-transform-classes
  - #17203 Interepret parser allow* options as top level only (@ JLHwung)
- babel-parser
  - #17371 fix: disable using in ambient context (@ JLHwung)
🐛 Bug Fix
- babel-core
  - #17392 Improve TS babel config loading (@ JLHwung)
- babel-types
  - #17376 fix: support negative bigint in valueToNode (@ JLHwung)
- babel-plugin-transform-parameters
  - #17352 fix: Params of async function* should throw synchronously (@ liuxingbaoyu)
🏠 Internal
- babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread
  - #17389 Use NodePath#splitExportDeclaration in destructuring transforms (@ JLHwung)
Committers: 6
- Arthur (@ arthur-mountain)
- Babel Bot (@ babel-bot)
- Evan Anderson (@ evankanderson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.27.5 - 2025-06-03
v7.27.5 (2025-06-03)

Thanks @ NullVoxPopuli for your first PR!

🐛 Bug Fix
- babel-plugin-transform-regenerator
  - #17359 fix: Unexpected infinite loop with regenerator for try (@ liuxingbaoyu)
- Other
  - #17349 Map ESLint's sourceType: commonjs to script (@ JLHwung)
💅 Polish
- babel-parser
  - #17333 Improve using declaration errors (@ JLHwung)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- @ NullVoxPopuli
- @ liuxingbaoyu
7.27.4 - 2025-05-30
v7.27.4 (2025-05-30)

👓 Spec Compliance
- babel-parser, babel-plugin-proposal-explicit-resource-management
  - #17323 Disallow using in bare case statement (@ JLHwung)
💅 Polish
- babel-parser
  - #17311 Improve parseExpression error messages (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17287 Reduce regenerator size more (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  - #17334 Use shorter method names for regenerator context (@ nicolo-ribaudo)
  - #17268 Reduce regenerator helper size (@ liuxingbaoyu)
- babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  - #17238 Split regeneratorRuntime into multiple helpers (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.27.3 - 2025-05-27
v7.27.3 (2025-05-27)

🐛 Bug Fix
- babel-generator
  - #17324 Improve multiline comments handling in yield/await expression (@ JLHwung)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17328 Correctly set .displayName on GeneratorFunction (@ nicolo-ribaudo)
- babel-plugin-proposal-explicit-resource-management
  - #17319 fix: handle shadowed binding in for using of body (@ JLHwung)
  - #17317 fix: support named evaluation for using declaration (@ JLHwung)
- babel-plugin-proposal-decorators, babel-types
  - #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@ magic-akari)
- babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  - #17257 Preserve class id when transforming using declarations with exported class (@ JLHwung)
- babel-parser
  - #17312 fix(parser): properly handle optional markers in generator class methods (@ magic-akari)
  - #17307 fix(parser): Terminate modifier parsing at newline (@ magic-akari)
- babel-generator, babel-parser
  - #17308 Improve import phase parsing (@ JLHwung)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Vik R (@ vikr01)
- @ liuxingbaoyu
- @ magic-akari
- fisker Cheung (@ fisker)
7.27.2 - 2025-05-06
v7.27.2 (2025-05-06)

🐛 Bug Fix
- babel-parser
  - #17289 fix: @ babel/parser/bin/index.js contains node: protocol require (@ liuxingbaoyu)
  - #17291 fix: Private class method not found when TS and estree (@ liuxingbaoyu)
- babel-plugin-transform-object-rest-spread
  - #17281 Fix: improve object rest handling in array pattern (@ JLHwung)
- babel-plugin-transform-modules-commonjs, babel-template
  - #17284 fix(babel-template): Properly handle empty string replacements (@ magic-akari)
🏃‍♀️ Performance
- babel-cli
  - #17285 Enable Node compile cache for @ babel/cli (@ JLHwung)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- @ magic-akari
7.27.1 - 2025-04-30
v7.27.1 (2025-04-30)

Thanks @ kermanx and @ woaitsAryan for your first PRs!

👓 Spec Compliance
- babel-parser
  - #17254 Allow using of as lexical declaration within for (@ JLHwung)
  - #17230 Disallow get/set in TSPropertySignature (@ JLHwung)
- babel-parser, babel-types
  - #17193 Stricter TSImportType options parsing (@ JLHwung)
🐛 Bug Fix
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  - #17137 fix: do expressions should allow early exit (@ kermanx)
- babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  - #17251 Fix: propagate argument evaluation errors through async promise chain (@ magic-akari)
- babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  - #17231 fix apply()/call() annotated as pure (@ Lacsw)
- babel-helper-fixtures, babel-parser
  - #17233 Create ChainExpression within TSInstantiationExpression (@ JLHwung)
- babel-generator, babel-parser
  - #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@ JLHwung)
- babel-parser
  - #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@ JLHwung)
  - #17080 Fix start of TSParameterProperty (@ JLHwung)
- babel-compat-data, babel-preset-env
  - #17228 Update firefox bugfix compat data (@ JLHwung)
- babel-traverse
  - #17156 fix: Objects and arrays with multiple references should not be evaluated (@ liuxingbaoyu)
- babel-generator
  - #17216 Fix: support const type parameter in generator (@ JLHwung)
💅 Polish
- babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
  - #17221 Reduce generated names size for the 10th-11th (@ nicolo-ribaudo)
🏠 Internal
- babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17263 Remove unused regenerator-runtime dep in @ babel/runtime (@ nicolo-ribaudo)
- babel-compat-data, babel-preset-env
  - #17256 Tune plugin compat data (@ JLHwung)
- babel-compat-data, babel-standalone
  - #17236 migrate babel-compat-data build script to mjs (@ JLHwung)
- babel-register
  - #16844 Migrate @ babel/register to cts (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17205 Inline regenerator in the relevant packages (@ nicolo-ribaudo)
- All packages
  - #17207 Enforce node protocol import (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  - #16538 Reduce interopRequireWildcard size (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17213 Reduce regeneratorRuntime size (@ liuxingbaoyu)
Committers: 9
- Aryan Bharti (@ woaitsAryan)
- Babel Bot (@ babel-bot)
- Frolov Roman (@ Lacsw)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- @ magic-akari
- _Kerman (@ kermanx)
- fisker Cheung (@ fisker)
7.27.0 - 2025-03-24
v7.27.0 (2025-03-24)

Thanks @ ishchhabra and @ vovkasm for your first PRs!

👓 Spec Compliance
- babel-generator, babel-parser
  - #16977 Default importAttributesKeyword to with (@ JLHwung)
🚀 New Feature
- babel-helper-create-class-features-plugin, babel-traverse, babel-types
  - #17169 Allow traverseFast to exit early (@ liuxingbaoyu)
- babel-parser, babel-types
  - #17110 Add ImportAttributes to Standardized and move its parser test fixtures (@ JLHwung)
- babel-generator
  - #17100 fix(babel-generator): add named export of generate function (@ vovkasm)
- babel-parser, babel-template
  - #17149 Add allowYieldOutsideFunction to parser (@ liuxingbaoyu)
- babel-plugin-transform-typescript, babel-traverse
  - #17102 feat: Add upToScope parameter to hasBinding (@ liuxingbaoyu)
- babel-parser
  - #17082 Support ESTree AccessorProperty (@ JLHwung)
- babel-types
  - #17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@ ishchhabra)
🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16816 fix: Class reference in type throws error (@ liuxingbaoyu)
- babel-traverse
  - #17170 fix: Reset child scopes when scope.crawl() (@ liuxingbaoyu)
- babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17118 Fix: align behaviour to tsc rewriteRelativeImportExtensions (@ JLHwung)
- babel-cli
  - #17182 fix: @ babel/cli generates duplicate inline source maps (@ liuxingbaoyu)
- babel-plugin-transform-named-capturing-groups-regex, babel-types
  - #17175 Generate computed proto key (@ JLHwung)
🏃‍♀️ Performance
- babel-types
  - #16870 perf: Improve builders of @ babel/types (@ liuxingbaoyu)
- babel-helper-create-regexp-features-plugin
  - #17176 fix: improve duplicate named groups check (@ JLHwung)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Ish Chhabra (@ ishchhabra)
- Vladimir Timofeev (@ vovkasm)
- @ liuxingbaoyu
7.26.10 - 2025-03-11
7.26.9 - 2025-02-14
7.26.8 - 2025-02-08
7.26.7 - 2025-01-24
7.26.5 - 2025-01-10
7.26.3 - 2024-12-04
7.26.2 - 2024-10-30
7.26.1 - 2024-10-25
7.26.0 - 2024-10-25
7.25.9 - 2024-10-22
7.25.8 - 2024-10-10
7.25.7 - 2024-10-02
7.25.6 - 2024-08-29
7.25.4 - 2024-08-22
7.25.3 - 2024-07-31
7.25.0 - 2024-07-26
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.4 - 2024-04-03
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25

from @babel/parser GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @babel/parser from 7.23.9 to 7.28.0. See this package in npm: @babel/parser See this project in Snyk: https://app.snyk.io/org/snyk-apprisk-essentials-closed-beta-demo-group/project/cfb68d70-f797-476d-81cb-ddb104c2c103?utm_source=github&utm_medium=referral&page=upgrade-pr

snyk-io · 2025-07-29T22:22:00Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

✅ license/snyk check is complete. No issues have been found. (View Details)

✅ code/snyk check is complete. No issues have been found. (View Details)

gemini-code-assist

Summary of Changes

Hello @dorgamliel-snyk, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs a significant version upgrade for the @babel/parser package and its associated Babel dependencies. The update aims to incorporate the latest features, bug fixes, and performance enhancements from the Babel project, ensuring the project stays current with modern JavaScript syntax and tooling improvements.

Highlights

Core Dependency Upgrade: The primary change in this pull request is the upgrade of the @babel/parser package from version 7.23.9 to 7.28.0.
Related Dependency Updates: This upgrade also includes necessary updates to other core Babel dependencies, specifically @babel/types (from 7.23.9 to 7.28.2), @babel/helper-string-parser (from 7.23.4 to 7.27.1), and @babel/helper-validator-identifier (from 7.22.20 to 7.27.1).
Feature Enhancements & Bug Fixes: The updated Babel versions bring a multitude of new features, bug fixes, spec compliance improvements (e.g., explicit resource management, discard binding, sourceType: commonjs), and performance optimizations across the Babel ecosystem.
Dependency Clean-up: The to-fast-properties dependency has been removed from the project's dependency tree, contributing to a cleaner and potentially more efficient build.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in issue comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments or fill out our survey to provide feedback.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request upgrades @babel/parser from version 7.23.9 to 7.28.0. To ensure compatibility and prevent potential issues, consider updating other related @babel packages as well.

gemini-code-assist · 2025-07-29T22:23:31Z

package.json

  "dependencies": {
    "@amplitude/experiment-node-server": "^1.8.2",
-    "@babel/parser": "^7.23.9",
+    "@babel/parser": "^7.28.0",


Consider updating @babel/traverse and @babel/types to the latest versions to ensure compatibility with @babel/parser. Leaving them at older versions might lead to unexpected issues.

dorgamliel-snyk requested a review from a team as a code owner July 29, 2025 22:21

gemini-code-assist bot reviewed Jul 29, 2025

View reviewed changes

[Snyk] Upgrade @babel/parser from 7.23.9 to 7.28.0 #648

Are you sure you want to change the base?

[Snyk] Upgrade @babel/parser from 7.23.9 to 7.28.0 #648

Uh oh!

Conversation

dorgamliel-snyk commented Jul 29, 2025

Snyk has created this PR to upgrade @babel/parser from 7.23.9 to 7.28.0.

v7.28.0 (2025-07-02)

🚀 New Feature

🐛 Bug Fix

🏠 Internal

Committers: 5

v7.27.7 (2025-06-26)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Committers: 6

v7.27.5 (2025-06-03)

🐛 Bug Fix

💅 Polish

Committers: 4

v7.27.4 (2025-05-30)

👓 Spec Compliance

💅 Polish

🔬 Output optimization

Committers: 4

v7.27.3 (2025-05-27)

🐛 Bug Fix

Committers: 7

v7.27.2 (2025-05-06)

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 5

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 9

v7.27.0 (2025-03-24)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 5

Uh oh!

snyk-io bot commented Jul 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎉 Snyk checks have passed. No issues have been found so far.

Uh oh!

gemini-code-assist bot left a comment

Choose a reason for hiding this comment

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist bot Jul 29, 2025

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

snyk-io bot commented Jul 29, 2025 •

edited

Loading