[Snyk] Upgrade @babel/traverse from 7.23.9 to 7.28.0 #649

dorgamliel-snyk · 2025-07-29T22:21:51Z

Snyk has created this PR to upgrade @babel/traverse from 7.23.9 to 7.28.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 27 versions ahead of your current version.
The recommended version was released a month ago.

Release notes

Package name: @babel/traverse

7.28.0 - 2025-07-02
v7.28.0 (2025-07-02)

🚀 New Feature
- babel-node
  - #17147 Support top level await in node repl (@ liuxingbaoyu)
- babel-types
  - #17258 feat(matchesPattern): support super/private/meta (@ JLHwung)
- babel-compat-data, babel-preset-env
  - #17355 Add explicit resource management to preset-env (@ JLHwung)
- babel-core, babel-parser
  - #17390 Support sourceType: "commonjs" (@ JLHwung)
- babel-generator, babel-parser
  - #17346 Materialize explicitResourceManagement parser plugin (@ JLHwung)
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  - #17391 LVal coverage updates (Part 2) (@ JLHwung)
- babel-parser, babel-traverse, babel-types
  - #17378 Accept bigints in t.bigIntLiteral factory (@ JLHwung)
- babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  - #17277 Transform discard binding (@ JLHwung)
- babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
  - #17163 Parse discard binding (@ JLHwung)
🐛 Bug Fix
- babel-helper-globals, babel-plugin-transform-classes, babel-traverse
  - #17297 Create babel-helper-globals (@ JLHwung)
- babel-types
  - #17009 feature: TSTypeOperator: keyof (#16799) (@ coderaiser)
🏠 Internal
- babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  - #17403 Update babel-polyfill packages (@ nicolo-ribaudo)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
7.27.7 - 2025-06-26
v7.27.7 (2025-06-26)

Thanks @ arthur-mountain and @ evankanderson for your first PRs!

👓 Spec Compliance
- babel-parser, babel-plugin-transform-classes
  - #17203 Interepret parser allow* options as top level only (@ JLHwung)
- babel-parser
  - #17371 fix: disable using in ambient context (@ JLHwung)
🐛 Bug Fix
- babel-core
  - #17392 Improve TS babel config loading (@ JLHwung)
- babel-types
  - #17376 fix: support negative bigint in valueToNode (@ JLHwung)
- babel-plugin-transform-parameters
  - #17352 fix: Params of async function* should throw synchronously (@ liuxingbaoyu)
🏠 Internal
- babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread
  - #17389 Use NodePath#splitExportDeclaration in destructuring transforms (@ JLHwung)
Committers: 6
- Arthur (@ arthur-mountain)
- Babel Bot (@ babel-bot)
- Evan Anderson (@ evankanderson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.27.4 - 2025-05-30
v7.27.4 (2025-05-30)

👓 Spec Compliance
- babel-parser, babel-plugin-proposal-explicit-resource-management
  - #17323 Disallow using in bare case statement (@ JLHwung)
💅 Polish
- babel-parser
  - #17311 Improve parseExpression error messages (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17287 Reduce regenerator size more (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  - #17334 Use shorter method names for regenerator context (@ nicolo-ribaudo)
  - #17268 Reduce regenerator helper size (@ liuxingbaoyu)
- babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  - #17238 Split regeneratorRuntime into multiple helpers (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.27.3 - 2025-05-27
v7.27.3 (2025-05-27)

🐛 Bug Fix
- babel-generator
  - #17324 Improve multiline comments handling in yield/await expression (@ JLHwung)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17328 Correctly set .displayName on GeneratorFunction (@ nicolo-ribaudo)
- babel-plugin-proposal-explicit-resource-management
  - #17319 fix: handle shadowed binding in for using of body (@ JLHwung)
  - #17317 fix: support named evaluation for using declaration (@ JLHwung)
- babel-plugin-proposal-decorators, babel-types
  - #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@ magic-akari)
- babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  - #17257 Preserve class id when transforming using declarations with exported class (@ JLHwung)
- babel-parser
  - #17312 fix(parser): properly handle optional markers in generator class methods (@ magic-akari)
  - #17307 fix(parser): Terminate modifier parsing at newline (@ magic-akari)
- babel-generator, babel-parser
  - #17308 Improve import phase parsing (@ JLHwung)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Vik R (@ vikr01)
- @ liuxingbaoyu
- @ magic-akari
- fisker Cheung (@ fisker)
7.27.1 - 2025-04-30
v7.27.1 (2025-04-30)

Thanks @ kermanx and @ woaitsAryan for your first PRs!

👓 Spec Compliance
- babel-parser
  - #17254 Allow using of as lexical declaration within for (@ JLHwung)
  - #17230 Disallow get/set in TSPropertySignature (@ JLHwung)
- babel-parser, babel-types
  - #17193 Stricter TSImportType options parsing (@ JLHwung)
🐛 Bug Fix
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  - #17137 fix: do expressions should allow early exit (@ kermanx)
- babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  - #17251 Fix: propagate argument evaluation errors through async promise chain (@ magic-akari)
- babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  - #17231 fix apply()/call() annotated as pure (@ Lacsw)
- babel-helper-fixtures, babel-parser
  - #17233 Create ChainExpression within TSInstantiationExpression (@ JLHwung)
- babel-generator, babel-parser
  - #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@ JLHwung)
- babel-parser
  - #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@ JLHwung)
  - #17080 Fix start of TSParameterProperty (@ JLHwung)
- babel-compat-data, babel-preset-env
  - #17228 Update firefox bugfix compat data (@ JLHwung)
- babel-traverse
  - #17156 fix: Objects and arrays with multiple references should not be evaluated (@ liuxingbaoyu)
- babel-generator
  - #17216 Fix: support const type parameter in generator (@ JLHwung)
💅 Polish
- babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
  - #17221 Reduce generated names size for the 10th-11th (@ nicolo-ribaudo)
🏠 Internal
- babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17263 Remove unused regenerator-runtime dep in @ babel/runtime (@ nicolo-ribaudo)
- babel-compat-data, babel-preset-env
  - #17256 Tune plugin compat data (@ JLHwung)
- babel-compat-data, babel-standalone
  - #17236 migrate babel-compat-data build script to mjs (@ JLHwung)
- babel-register
  - #16844 Migrate @ babel/register to cts (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17205 Inline regenerator in the relevant packages (@ nicolo-ribaudo)
- All packages
  - #17207 Enforce node protocol import (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  - #16538 Reduce interopRequireWildcard size (@ liuxingbaoyu)
- babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  - #17213 Reduce regeneratorRuntime size (@ liuxingbaoyu)
Committers: 9
- Aryan Bharti (@ woaitsAryan)
- Babel Bot (@ babel-bot)
- Frolov Roman (@ Lacsw)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- @ magic-akari
- _Kerman (@ kermanx)
- fisker Cheung (@ fisker)
7.27.0 - 2025-03-24
v7.27.0 (2025-03-24)

Thanks @ ishchhabra and @ vovkasm for your first PRs!

👓 Spec Compliance
- babel-generator, babel-parser
  - #16977 Default importAttributesKeyword to with (@ JLHwung)
🚀 New Feature
- babel-helper-create-class-features-plugin, babel-traverse, babel-types
  - #17169 Allow traverseFast to exit early (@ liuxingbaoyu)
- babel-parser, babel-types
  - #17110 Add ImportAttributes to Standardized and move its parser test fixtures (@ JLHwung)
- babel-generator
  - #17100 fix(babel-generator): add named export of generate function (@ vovkasm)
- babel-parser, babel-template
  - #17149 Add allowYieldOutsideFunction to parser (@ liuxingbaoyu)
- babel-plugin-transform-typescript, babel-traverse
  - #17102 feat: Add upToScope parameter to hasBinding (@ liuxingbaoyu)
- babel-parser
  - #17082 Support ESTree AccessorProperty (@ JLHwung)
- babel-types
  - #17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@ ishchhabra)
🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16816 fix: Class reference in type throws error (@ liuxingbaoyu)
- babel-traverse
  - #17170 fix: Reset child scopes when scope.crawl() (@ liuxingbaoyu)
- babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #17118 Fix: align behaviour to tsc rewriteRelativeImportExtensions (@ JLHwung)
- babel-cli
  - #17182 fix: @ babel/cli generates duplicate inline source maps (@ liuxingbaoyu)
- babel-plugin-transform-named-capturing-groups-regex, babel-types
  - #17175 Generate computed proto key (@ JLHwung)
🏃‍♀️ Performance
- babel-types
  - #16870 perf: Improve builders of @ babel/types (@ liuxingbaoyu)
- babel-helper-create-regexp-features-plugin
  - #17176 fix: improve duplicate named groups check (@ JLHwung)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Ish Chhabra (@ ishchhabra)
- Vladimir Timofeev (@ vovkasm)
- @ liuxingbaoyu
7.26.10 - 2025-03-11
7.26.9 - 2025-02-14
7.26.8 - 2025-02-08
7.26.7 - 2025-01-24
7.26.5 - 2025-01-10
7.26.4 - 2024-12-05
7.26.3 - 2024-12-04
7.25.9 - 2024-10-22
7.25.7 - 2024-10-02
7.25.6 - 2024-08-29
7.25.4 - 2024-08-22
7.25.3 - 2024-07-31
7.25.2 - 2024-07-30
7.25.1 - 2024-07-28
7.25.0 - 2024-07-26
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25

from @babel/traverse GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @babel/traverse from 7.23.9 to 7.28.0. See this package in npm: @babel/traverse See this project in Snyk: https://app.snyk.io/org/snyk-apprisk-essentials-closed-beta-demo-group/project/cfb68d70-f797-476d-81cb-ddb104c2c103?utm_source=github&utm_medium=referral&page=upgrade-pr

snyk-io · 2025-07-29T22:22:05Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

✅ license/snyk check is complete. No issues have been found. (View Details)

✅ code/snyk check is complete. No issues have been found. (View Details)

gemini-code-assist

Summary of Changes

Hello @dorgamliel-snyk, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

I've opened this pull request to upgrade the @babel/traverse dependency from version 7.23.9 to 7.28.0. This is an automated update by Snyk to ensure our project stays current with the latest improvements and fixes in the Babel ecosystem. The upgrade encompasses several minor versions of @babel/traverse, bringing a host of new features, bug fixes, and performance enhancements that will benefit our codebase by improving compatibility and potentially resolving underlying issues.

Highlights

Core Dependency Upgrade: The primary change in this pull request is the upgrade of the @babel/traverse package from version 7.23.9 to 7.28.0.
Automated Maintenance: This upgrade is an automated process initiated by Snyk, aimed at keeping project dependencies current and addressing potential vulnerabilities or improving stability.
Babel Ecosystem Enhancements: The new version of @babel/traverse brings in a range of updates from the Babel ecosystem, including new features like top-level await support in Node.js REPL, explicit resource management, and sourceType: "commonjs" support. It also includes various bug fixes related to spec compliance, type handling, and performance optimizations across different Babel packages.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in issue comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments or fill out our survey to provide feedback.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request upgrades @babel/traverse from version 7.23.9 to 7.28.0. This is a significant jump across 27 minor/patch versions, but as it's within the same major version, it should be safe and not introduce breaking changes. The update also cleans up some transitive dependencies in package-lock.json. I've added a suggestion to align the versions of all @babel packages in package.json for better maintainability.

gemini-code-assist · 2025-07-29T22:23:00Z

package.json

    "@babel/parser": "^7.23.9",
-    "@babel/traverse": "^7.23.9",
+    "@babel/traverse": "^7.28.0",
    "@babel/types": "^7.23.9",


For better maintainability and to avoid potential issues with version mismatches, it's recommended to update all related @babel packages in package.json to the same version. This PR updates @babel/traverse to ^7.28.0, so @babel/parser and @babel/types should also be updated to ^7.28.0.

"@babel/parser": "^7.28.0", "@babel/traverse": "^7.28.0", "@babel/types": "^7.28.0",

dorgamliel-snyk requested a review from a team as a code owner July 29, 2025 22:21

gemini-code-assist bot reviewed Jul 29, 2025

View reviewed changes

[Snyk] Upgrade @babel/traverse from 7.23.9 to 7.28.0 #649

Are you sure you want to change the base?

[Snyk] Upgrade @babel/traverse from 7.23.9 to 7.28.0 #649

Uh oh!

Conversation

dorgamliel-snyk commented Jul 29, 2025

Snyk has created this PR to upgrade @babel/traverse from 7.23.9 to 7.28.0.

v7.28.0 (2025-07-02)

🚀 New Feature

🐛 Bug Fix

🏠 Internal

Committers: 5

v7.27.7 (2025-06-26)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Committers: 6

v7.27.4 (2025-05-30)

👓 Spec Compliance

💅 Polish

🔬 Output optimization

Committers: 4

v7.27.3 (2025-05-27)

🐛 Bug Fix

Committers: 7

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 9

v7.27.0 (2025-03-24)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 5

Uh oh!

snyk-io bot commented Jul 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎉 Snyk checks have passed. No issues have been found so far.

Uh oh!

gemini-code-assist bot left a comment

Choose a reason for hiding this comment

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist bot Jul 29, 2025

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

snyk-io bot commented Jul 29, 2025 •

edited

Loading