Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 14, 2025

Bumps @babel/preset-react from 7.13.13 to 7.28.5.

Release notes

Sourced from @​babel/preset-react's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

  • babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • babel-plugin-transform-regenerator

... (truncated)

Changelog

Sourced from @​babel/preset-react's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

v7.28.4 (2025-09-05)

🏠 Internal

v7.28.3 (2025-08-14)

👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

🐛 Bug Fix

💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/preset-react since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) from 7.13.13 to 7.28.5.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-preset-react)

---
updated-dependencies:
- dependency-name: "@babel/preset-react"
  dependency-version: 7.28.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 14, 2025
@akshayutture-augment
Copy link
Contributor

@claude review this PR

@claude
Copy link

claude bot commented Nov 20, 2025

Claude finished @akshayutture-augment's task —— View job


PR Review: @babel/preset-react Upgrade (7.13.13 → 7.28.5)

I've reviewed this Dependabot PR that upgrades @babel/preset-react from 7.13.13 to 7.28.5. Here's my analysis:


🔍 Summary of Changes

  • package.json: Bumped @babel/preset-react from ^7.13.13 to ^7.28.5
  • yarn.lock: Updated transitive dependencies including helper packages, parser, types, and generator

⚠️ Critical Compatibility Issue

This upgrade creates a significant version mismatch with other Babel packages:

The project currently uses Babel 7.13.x for most packages:

  • @babel/core: ~7.13.16
  • @babel/preset-env: ~7.13.15
  • @babel/plugin-transform-runtime: ~7.13.15
  • @babel/plugin-proposal-decorators: ~7.13.15
  • @babel/plugin-proposal-class-properties: ~7.13.0
  • @babel/plugin-transform-react-jsx: ^7.13.12
  • @babel/runtime: ~7.13.17

But this PR upgrades @babel/preset-react to 7.28.5, creating a ~15 minor version gap.

Why this matters:

  1. Transitive dependency conflicts: The upgraded preset pulls in newer versions of shared Babel packages (parser, types, generator, helper utilities) which may conflict with the older versions
  2. API inconsistencies: Different Babel package versions may expect different internal APIs
  3. Build stability: Mixed Babel versions can cause subtle transformation issues

📋 What's New in 7.28.5

The upgrade includes several improvements (from release notes):

Bug Fixes:

  • Improved TypeScript declaration parsing
  • Fixed JSXIdentifier handling in isReferencedIdentifier
  • Better error typing in @babel/parser
  • Fixed destructuring and rest operator behaviors

Performance:

  • Faster location finding in buildCodeFrameError

Spec Compliance:

  • Unicode 17 identifier support
  • Runtime error handling for function call assignment targets

✅ Positive Aspects

  1. Configuration compatibility: Your babel.config.js uses the automatic runtime with @emotion/react import source, which is well-supported in 7.28.5
  2. No breaking changes: The changes in 7.28.5 are primarily bug fixes and improvements
  3. Lock file properly updated: yarn.lock correctly reflects all transitive dependency changes

🎯 Recommendations

Option 1: Upgrade all Babel packages together (Recommended)

  • Upgrade all @babel/* packages to 7.28.x or a consistent version
  • This ensures compatibility and avoids version conflicts
  • Test thoroughly after upgrading

Option 2: Keep current version (Conservative)

  • Close this PR and stay on 7.13.13 until you're ready for a coordinated Babel upgrade
  • Version 7.13.x is functional, though older

Option 3: Accept with caution (Not recommended)

  • Accept this PR but monitor closely for issues
  • Be prepared to roll back if build or runtime issues occur
  • Run full test suite before merging

🧪 Testing Recommendations

Before merging, verify:

  1. Build succeeds: Run yarn build-production to ensure Webpack compilation works
  2. Tests pass: Run yarn test to verify React component transformations are correct
  3. Storybook builds: Run yarn storybook-build to check UI component rendering
  4. Development mode: Run yarn dev-ui to verify hot reload and JSX transform work
  5. Check for warnings: Look for any Babel-related warnings in console output

📝 Notes

  • No CI runs detected: I don't see any CI workflow runs for this PR yet, so automated test results aren't available
  • React 17 usage: Your project uses React 17.0.2 with the automatic JSX runtime, which should work fine with both versions
  • Emotion integration: The @emotion/react import source configuration should be unaffected

💡 My Assessment

Risk Level: Medium-High due to version mismatch

I recommend Option 1 (coordinated upgrade of all Babel packages) for the best long-term maintainability. If that's not feasible right now, Option 2 (defer until ready) would be safer than accepting this isolated upgrade.

If you decide to proceed, make sure to run the full test suite and monitor for any build or transformation issues.


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants