refactor: Upgrade @babel/runtime-corejs3 from 7.28.0 to 7.28.2 #2714
Conversation
Snyk has created this PR to upgrade @babel/runtime-corejs3 from 7.28.0 to 7.28.2. See this package in npm: @babel/runtime-corejs3 See this project in Snyk: https://app.snyk.io/org/acinader/project/6e173dba-575d-4f4d-9506-7ebefca5868d?utm_source=github&utm_medium=referral&page=upgrade-pr
|
I will reformat the title to use the proper commit message syntax. |
parse-github-assistant
bot
changed the title
|
🚀 Thanks for opening this pull request! |
|
Important Review skippedReview was skipped due to path filters ⛔ Files ignored due to path filters (1)
CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including You can disable this status message by setting the 📝 WalkthroughWalkthroughBumped the dependency version of @babel/runtime-corejs3 in package.json from 7.28.0 to 7.28.2. No other files or declarations were modified. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. CodeRabbit Commands (Invoked using PR/Issue comments)Type Other keywords and placeholders
CodeRabbit Configuration File (
|
🎉 Snyk checks have passed. No issues have been found so far.✅ security/snyk check is complete. No issues have been found. (View Details) |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## alpha #2714 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 63 63
Lines 6185 6185
Branches 1472 1472
=========================================
Hits 6185 6185 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🧹 Nitpick comments (1)
package.json (1)
34-44: Optional: Align Babel plugin patch version for consistencyYou can bump
@babel/plugin-transform-runtimefrom 7.28.0 → 7.28.2 to keep Babel runtime/plugin on the same patch line. Not required, but it reduces version skew when debugging build artifacts."devDependencies": { "@babel/core": "7.28.0", "@babel/plugin-proposal-class-properties": "7.18.6", - "@babel/plugin-transform-runtime": "7.28.0", + "@babel/plugin-transform-runtime": "7.28.2",
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
💡 Knowledge Base configuration:
- MCP integration is disabled by default for public repositories
- Jira integration is disabled by default for public repositories
- Linear integration is disabled by default for public repositories
You can enable these sources in your CodeRabbit configuration.
⛔ Files ignored due to path filters (1)
package-lock.jsonis excluded by!**/package-lock.json
📒 Files selected for processing (1)
package.json(1 hunks)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)
- GitHub Check: build (Node 22, 22.4.1)
- GitHub Check: build (Node 18, 18.20.4)
- GitHub Check: build (Node 20, 20.15.1)
🔇 Additional comments (1)
package.json (1)
34-34: LGTM: Safe patch bump to @babel/runtime-corejs3 7.28.2Patch update looks low-risk and should bring minor bug fixes (incl. stricter regenerator compatibility). No breaking config changes expected for consumers.
| }, | ||
| "dependencies": { | ||
| "@babel/runtime-corejs3": "7.28.0", | ||
| "@babel/runtime-corejs3": "7.28.2", |
There was a problem hiding this comment.
💡 Verification agent
🧩 Analysis chain
Verify lockfile deduplication and CI cache invalidation
Ensure the lockfile(s) and caches reflect 7.28.2 only (no mixed 7.28.0/7.28.2 installs). This avoids duplicate helper/polyfill code paths in bundles.
Run from repo root:
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "Searching lockfiles for @babel/runtime-corejs3 versions..."
found_any=false
for f in package-lock.json pnpm-lock.yaml yarn.lock; do
if [[ -f "$f" ]]; then
found_any=true
echo "==> $f"
rg -n "(@babel/runtime-corejs3|core-js-pure)" "$f" -C1 || true
fi
done
if ! $found_any; then
echo "No lockfile found. If CI generates one, ensure it resolves to 7.28.2."
fi
echo
echo "Checking for mixed versions in node_modules (if installed)..."
if [[ -d node_modules ]]; then
fd -a '@babel/runtime-corejs3' node_modules | xargs -I{} node -e "try{console.log(require('./{}'/package.json).version, '->', './{}')}catch(e){}" || true
else
echo "node_modules not present; skip."
fi
echo
echo "Tip: clear CI caches for node_modules and lockfile-based caches after merging."Length of output: 4861
Action Required: Deduplicate @babel/runtime-corejs3 to 7.28.2 Across Lockfiles
We’ve detected mixed versions of @babel/runtime-corejs3 in package-lock.json, which will pull in multiple helper/polyfill code paths:
node_modules/@parse/push-adapter/node_modules/@babel/runtime-corejs3at 7.26.9node_modules/parse/node_modules/@babel/runtime-corejs3at 7.27.0- Top-level dependency at 7.28.2
To resolve this and ensure only 7.28.2 is installed:
• Add an override (npm v8+) or resolutions (Yarn) in your package.json:
"dependencies": {
"@babel/runtime-corejs3": "7.28.2",
…
},
+ "overrides": {
+ "@babel/runtime-corejs3": "7.28.2"
+ },• Reinstall and regenerate your lockfile:
npm install
git add package-lock.json
git commit -m "chore: enforce @babel/[email protected] via override"• In your CI, clear caches for node_modules and any lockfile-derived caches so builds pick up the deduplicated version.
After merging, re-run the verification script to confirm no 7.26.x or 7.27.x entries remain.
🤖 Prompt for AI Agents
package.json around line 34: there are mixed versions of @babel/runtime-corejs3
in lockfiles (7.26.9, 7.27.0, and top-level 7.28.2); add an npm override (or
Yarn resolution) in package.json to force @babel/[email protected] at
install, then run npm install to regenerate package-lock.json, commit the
updated lockfile with a clear message, and clear CI node_modules/cache so
subsequent builds pick up the deduplicated version; finally re-run the
verification script to ensure no 7.26.x or 7.27.x entries remain.
Snyk has created this PR to upgrade @babel/runtime-corejs3 from 7.28.0 to 7.28.2.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released a month ago.
Release notes
Package name: @babel/runtime-corejs3
-
7.28.2 - 2025-07-24
- #17445 [babel 7] Make
- #17441 fix:
- Babel Bot (@ babel-bot)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- SOUHAILA SERBOUT (@ souhailaS)
- @ liuxingbaoyu
-
7.28.0 - 2025-07-02
- #17147 Support top level await in node repl (@ liuxingbaoyu)
- #17258 feat(matchesPattern): support super/private/meta (@ JLHwung)
- #17355 Add explicit resource management to preset-env (@ JLHwung)
- #17390 Support
- #17346 Materialize
- #17391 LVal coverage updates (Part 2) (@ JLHwung)
- #17378 Accept bigints in
- #17277 Transform discard binding (@ JLHwung)
- #17163 Parse discard binding (@ JLHwung)
- #17297 Create babel-helper-globals (@ JLHwung)
- #17009 feature: TSTypeOperator: keyof (#16799) (@ coderaiser)
- #17403 Update
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
from @babel/runtime-corejs3 GitHub release notesv7.28.2 (2025-07-24)
Thanks @ souhailaS for your first PR!
🐛 Bug Fix
babel-typesoperatorparam int.tsTypeOperatoroptional (@ nicolo-ribaudo)babel-helpers,babel-plugin-transform-async-generator-functions,babel-plugin-transform-regenerator,babel-preset-env,babel-runtime-corejs3regeneratorDefinecompatibility with es5 strict mode (@ liuxingbaoyu)Committers: 4
v7.28.0 (2025-07-02)
🚀 New Feature
babel-nodebabel-typesbabel-compat-data,babel-preset-envbabel-core,babel-parsersourceType: "commonjs"(@ JLHwung)babel-generator,babel-parserexplicitResourceManagementparser plugin (@ JLHwung)babel-plugin-proposal-destructuring-private,babel-plugin-proposal-do-expressions,babel-plugin-transform-object-rest-spread,babel-traverse,babel-typesbabel-parser,babel-traverse,babel-typest.bigIntLiteralfactory (@ JLHwung)babel-generator,babel-plugin-proposal-destructuring-private,babel-plugin-proposal-discard-binding,babel-plugin-transform-destructuring,babel-plugin-transform-explicit-resource-management,babel-plugin-transform-react-display-name,babel-typesbabel-generator,babel-parser,babel-plugin-proposal-destructuring-private,babel-plugin-transform-block-scoping,babel-plugin-transform-object-rest-spread,babel-plugin-transform-typescript,babel-traverse,babel-types🐛 Bug Fix
babel-helper-globals,babel-plugin-transform-classes,babel-traversebabel-types🏠 Internal
babel-compat-data,babel-plugin-proposal-decorators,babel-plugin-transform-async-generator-functions,babel-plugin-transform-json-modules,babel-plugin-transform-regenerator,babel-plugin-transform-runtime,babel-preset-env,babel-runtime-corejs3babel-polyfillpackages (@ nicolo-ribaudo)Committers: 5
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
Summary by CodeRabbit