Skip to content

Conversation

@JLHwung
Copy link
Contributor

@JLHwung JLHwung commented Jun 16, 2025

Q                       A
Fixed Issues? Fixes #17377
Patch: Bug Fix?
Major: Breaking Change?
Minor: New Feature?
Tests Added + Pass? Yes
Documentation PR Link babel/website#3106
Any Dependency Changes?
License MIT

This pull request introduces support for a new commonjs sourceType in the @babel/parser and the @babel/core. When sourceType is commonjs, the program will parsed as if they are wrapped within a function body, thus allowing global return, top level new.target as well as top level using declarations. In this mode, the parser will try to mirror the parsing behaviour of the Node.js cjs environment.

I think this PR should resolve #17377. I plan to add another sourceType for the @babel/template usage: sourceType: "babel-template", ultimately it will be the default source type when people is constructing a Babel template. In this mode, any context-related AST restriction will be relaxed, for example: superOutsideMethod, yieldOutsideGenerator, or even breakRandomLabel, etc. Hopefully we can remove all allow* parser options in Babel 8.

See also:

@JLHwung JLHwung added PR: New Feature 🚀 A type of pull request used for our changelog categories pkg: parser labels Jun 16, 2025
@babel-bot
Copy link
Collaborator

babel-bot commented Jun 16, 2025

Build successful! You can test your changes in the REPL here: https://babeljs.io/repl/build/59664

@JLHwung JLHwung marked this pull request as draft June 16, 2025 21:05
@JLHwung JLHwung force-pushed the source-type-commonjs branch from c769278 to 2478fe6 Compare June 23, 2025 13:54
@JLHwung JLHwung marked this pull request as ready for review June 23, 2025 14:08
// https://eslint.org/docs/latest/use/configure/language-options#specifying-javascript-options
// ESLint supports "commonjs" but Babel parser does not.
sourceType: sourceType === "commonjs" ? "script" : sourceType,
sourceType,
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@babel/core is a peer dependency, we should probably check if we are on a version that supports commonjs.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK, though it was the previous behavior before #17349.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comment on lines 75 to 77
* "unambiguous" will make @babel/parser attempt to guess, based on the presence
* of ES6 import or export statements.
* Files with ES6 imports and exports are considered "module" and are otherwise "script".
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If there is a top-level return, I guess we could make unambiguous mean commonjs? I don't know if it's useful.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The current behaviour is to throw illegal top level return. Since no one ever complaints about it and we may have a babel-tempalte sourceType in the future, I lean toward keeping the scope of unambiguous as-is.

@liuxingbaoyu
Copy link
Member

I plan to add another sourceType for the @babel/template usage: sourceType: "babel-template", ultimately it will be the default source type when people is constructing a Babel template. In this mode, any context-related AST restriction will be relaxed, for example: superOutsideMethod, yieldOutsideGenerator, or even breakRandomLabel, etc. Hopefully we can remove all allow* parser options in Babel 8.

This seems to be the same as #17149 (comment) ?

@JLHwung
Copy link
Contributor Author

JLHwung commented Jun 23, 2025

I plan to add another sourceType for the @babel/template usage: sourceType: "babel-template", ultimately it will be the default source type when people is constructing a Babel template. In this mode, any context-related AST restriction will be relaxed, for example: superOutsideMethod, yieldOutsideGenerator, or even breakRandomLabel, etc. Hopefully we can remove all allow* parser options in Babel 8.

This seems to be the same as #17149 (comment) ?

Yes. While on one hand sourceType: "babel-template" seems to achieve the same effect of the then-proposed template: true option, on the other hand there are a few key differences:

  • The sourceType option conveys that this is a custom source type and is meant for Babel template only: For example we can decide that in Babel 8 sourceType: "babel-template" will be parsed as if they are wrapped within an async generator in a module source type. If one insists on usage for yield-as-identifier, await-as-identifier, they can use sourceType: "script" instead.

  • The sourceType option excludes interaction between the template option and other source types, which would be annoying since they would both affect certain parser flags

@liuxingbaoyu
Copy link
Member

  • The sourceType option excludes interaction between the template option and other source types, which would be annoying since they would both affect certain parser flags

Ah, actually I thought so at first. :)

The new feature sounds good to me, except I'm not sure about removing the allow* options.

Copy link
Member

@nicolo-ribaudo nicolo-ribaudo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd love to remove the allow* options in the feature -- we should look through issues/PRs where they have been added to make sure we are still covering all the use cases though.

I'd be fine with deferring it to Babel 9.

@nicolo-ribaudo nicolo-ribaudo added the PR: Ready to be Merged A pull request with already two approvals, but waiting for the next minor release label Jun 27, 2025
@nicolo-ribaudo nicolo-ribaudo added this to the v7.28.0 milestone Jun 27, 2025
@JLHwung JLHwung force-pushed the source-type-commonjs branch from 709bf48 to 8b6fcff Compare June 28, 2025 12:02
// your babel options
presets: ["@babel/preset-env"],
```js
module.exports = {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this update to eslint.config.js format?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah probably, I would also like to move them to the website as well. Of course that will be better addressed in another PR.

@nicolo-ribaudo nicolo-ribaudo merged commit 7896ed7 into babel:main Jun 29, 2025
96 of 97 checks passed
@nicolo-ribaudo nicolo-ribaudo deleted the source-type-commonjs branch June 29, 2025 20:34
mergify bot added a commit to reisene/HulajDusza-serwis that referenced this pull request Jul 31, 2025
![snyk-io[bot]](https://badgen.net/badge/icon/snyk-io%5Bbot%5D/green?label=)
![Contributor](https://badgen.net/badge/icon/Contributor/000000?label=)
[<img width="16" alt="Powered by Pull Request Badge"
src="https://user-images.githubusercontent.com/1393946/111216524-d2bb8e00-85d4-11eb-821b-ed4c00989c02.png">](https://pullrequestbadge.com/?utm_medium=github&utm_source=reisene&utm_campaign=badge_info)<!--
PR-BADGE: PLEASE DO NOT REMOVE THIS COMMENT -->


![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)


<h3>Snyk has created this PR to upgrade @babel/core from 7.27.4 to
7.28.0.</h3>

:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.

<hr/>


- The recommended version is **2 versions** ahead of your current
version.

- The recommended version was released **a month ago**.

#### Issues fixed by the recommended upgrade:

|  | Issue | Score | Exploit Maturity |

:-------------------------:|:-------------------------|:-------------------------|:-------------------------
![low
severity](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests//severity-low.svg
'low severity') | Regular Expression Denial of Service
(ReDoS)<br/>[SNYK-JS-BRACEEXPANSION-9789073](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073)
| **57** | Proof of Concept
![low
severity](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests//severity-low.svg
'low severity') | Regular Expression Denial of Service
(ReDoS)<br/>[SNYK-JS-BRACEEXPANSION-9789073](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073)
| **57** | Proof of Concept



<details>
<summary><b>Release notes</b></summary>
<br/>
  <details>
    <summary>Package name: <b>@babel/core</b></summary>
    <ul>
      <li>
<b>7.28.0</b> - <a
href="https://redirect.github.com/babel/babel/releases/tag/v7.28.0">2025-07-02</a></br><h2>v7.28.0
(2025-07-02)</h2>
<h4>🚀 New Feature</h4>
<ul>
<li><code>babel-node</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17147"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17147/hovercard">#17147</a>
Support top level await in node repl (<a
href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li>
</ul>
</li>
<li><code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17258"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17258/hovercard">#17258</a>
feat(matchesPattern): support super/private/meta (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-compat-data</code>, <code>babel-preset-env</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17355"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17355/hovercard">#17355</a> Add
explicit resource management to preset-env (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-core</code>, <code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17390"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17390/hovercard">#17390</a>
Support <code>sourceType: "commonjs"</code> (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-generator</code>, <code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17346"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17346/hovercard">#17346</a>
Materialize <code>explicitResourceManagement</code> parser plugin (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-proposal-do-expressions</code>,
<code>babel-plugin-transform-object-rest-spread</code>,
<code>babel-traverse</code>, <code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17391"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17391/hovercard">#17391</a> LVal
coverage updates (Part 2) (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-parser</code>, <code>babel-traverse</code>,
<code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17378"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17378/hovercard">#17378</a> Accept
bigints in <code>t.bigIntLiteral</code> factory (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-generator</code>,
<code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-proposal-discard-binding</code>,
<code>babel-plugin-transform-destructuring</code>,
<code>babel-plugin-transform-explicit-resource-management</code>,
<code>babel-plugin-transform-react-display-name</code>,
<code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17277"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17277/hovercard">#17277</a>
Transform discard binding (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-generator</code>, <code>babel-parser</code>,
<code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-transform-block-scoping</code>,
<code>babel-plugin-transform-object-rest-spread</code>,
<code>babel-plugin-transform-typescript</code>,
<code>babel-traverse</code>, <code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17163"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17163/hovercard">#17163</a> Parse
discard binding (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
</ul>
</li>
</ul>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-helper-globals</code>,
<code>babel-plugin-transform-classes</code>, <code>babel-traverse</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17297"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17297/hovercard">#17297</a> Create
babel-helper-globals (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17009"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17009/hovercard">#17009</a>
feature: TSTypeOperator: keyof (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2502652054"
data-permission-text="Title is private"
data-url="babel/babel#16799"
data-hovercard-type="issue"
data-hovercard-url="/babel/babel/issues/16799/hovercard"
href="https://redirect.github.com/babel/babel/issues/16799">#16799</a>)
(<a href="https://redirect.github.com/coderaiser">@ coderaiser</a>)</li>
</ul>
</li>
</ul>
<h4>🏠 Internal</h4>
<ul>
<li><code>babel-compat-data</code>,
<code>babel-plugin-proposal-decorators</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-json-modules</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-plugin-transform-runtime</code>,
<code>babel-preset-env</code>, <code>babel-runtime-corejs3</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17403"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17403/hovercard">#17403</a> Update
<code>babel-polyfill</code> packages (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 5</h4>
<ul>
<li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@
babel-bot</a>)</li>
<li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
<li>Nicolò Ribaudo (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
<li><a href="https://redirect.github.com/liuxingbaoyu">@
liuxingbaoyu</a></li>
<li>coderaiser (<a href="https://redirect.github.com/coderaiser">@
coderaiser</a>)</li>
</ul>
      </li>
      <li>
<b>7.27.7</b> - <a
href="https://redirect.github.com/babel/babel/releases/tag/v7.27.7">2025-06-26</a></br><h2>v7.27.7
(2025-06-26)</h2>
<p>Thanks <a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/arthur-mountain/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/arthur-mountain">@ arthur-mountain</a>
and <a class="user-mention notranslate" data-hovercard-type="user"
data-hovercard-url="/users/evankanderson/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/evankanderson">@ evankanderson</a> for
your first PRs!</p>
<h4>👓 Spec Compliance</h4>
<ul>
<li><code>babel-parser</code>,
<code>babel-plugin-transform-classes</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17203"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17203/hovercard">#17203</a>
Interepret parser <code>allow*</code> options as top level only (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17371"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17371/hovercard">#17371</a> fix:
disable using in ambient context (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
</ul>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-core</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17392"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17392/hovercard">#17392</a>
Improve TS babel config loading (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17376"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17376/hovercard">#17376</a> fix:
support negative bigint in valueToNode (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-plugin-transform-parameters</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17352"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17352/hovercard">#17352</a> fix:
Params of <code>async function*</code> should throw synchronously (<a
href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li>
</ul>
</li>
</ul>
<h4>🏠 Internal</h4>
<ul>
<li><code>babel-plugin-transform-destructuring</code>,
<code>babel-plugin-transform-object-rest-spread</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17389"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17389/hovercard">#17389</a> Use
<code>NodePath#splitExportDeclaration</code> in destructuring transforms
(<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 6</h4>
<ul>
<li>Arthur (<a href="https://redirect.github.com/arthur-mountain">@
arthur-mountain</a>)</li>
<li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@
babel-bot</a>)</li>
<li>Evan Anderson (<a href="https://redirect.github.com/evankanderson">@
evankanderson</a>)</li>
<li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
<li>Nicolò Ribaudo (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
<li><a href="https://redirect.github.com/liuxingbaoyu">@
liuxingbaoyu</a></li>
</ul>
      </li>
      <li>
<b>7.27.4</b> - <a
href="https://redirect.github.com/babel/babel/releases/tag/v7.27.4">2025-05-30</a></br><h2>v7.27.4
(2025-05-30)</h2>
<h4>👓 Spec Compliance</h4>
<ul>
<li><code>babel-parser</code>,
<code>babel-plugin-proposal-explicit-resource-management</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17323"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17323/hovercard">#17323</a>
Disallow using in bare case statement (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
</ul>
<h4>💅 Polish</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17311"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17311/hovercard">#17311</a>
Improve parseExpression error messages (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
</ul>
<h4>🔬 Output optimization</h4>
<ul>
<li><code>babel-helpers</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-async-to-generator</code>,
<code>babel-plugin-transform-block-scoping</code>,
<code>babel-plugin-transform-classes</code>,
<code>babel-plugin-transform-destructuring</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-plugin-transform-runtime</code>,
<code>babel-preset-env</code>, <code>babel-runtime-corejs2</code>,
<code>babel-runtime-corejs3</code>, <code>babel-runtime</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17287"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17287/hovercard">#17287</a> Reduce
<code>regenerator</code> size more (<a
href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li>
</ul>
</li>
<li><code>babel-helpers</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-async-to-generator</code>,
<code>babel-plugin-transform-block-scoping</code>,
<code>babel-plugin-transform-classes</code>,
<code>babel-plugin-transform-destructuring</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-plugin-transform-runtime</code>,
<code>babel-preset-env</code>, <code>babel-runtime-corejs3</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17334"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17334/hovercard">#17334</a> Use
shorter method names for regenerator context (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
<li><a href="https://redirect.github.com/babel/babel/pull/17268"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17268/hovercard">#17268</a> Reduce
<code>regenerator</code> helper size (<a
href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li>
</ul>
</li>
<li><code>babel-core</code>, <code>babel-helpers</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-async-to-generator</code>,
<code>babel-plugin-transform-block-scoping</code>,
<code>babel-plugin-transform-classes</code>,
<code>babel-plugin-transform-destructuring</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-plugin-transform-runtime</code>,
<code>babel-preset-env</code>, <code>babel-runtime-corejs2</code>,
<code>babel-runtime-corejs3</code>, <code>babel-runtime</code>,
<code>babel-standalone</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17238"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17238/hovercard">#17238</a> Split
<code>regeneratorRuntime</code> into multiple helpers (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 4</h4>
<ul>
<li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@
babel-bot</a>)</li>
<li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
<li>Nicolò Ribaudo (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
<li><a href="https://redirect.github.com/liuxingbaoyu">@
liuxingbaoyu</a></li>
</ul>
      </li>
    </ul>
from <a
href="https://redirect.github.com/babel/babel/releases">@babel/core
GitHub release notes</a>
  </details>
</details>

---

> [!IMPORTANT]
>
> - Check the changes in this PR to ensure they won't cause issues with
your project.
> - This PR was automatically created by Snyk using the credentials of a
real user.
> - Max score is 1000. Note that the real score may have changed since
the PR was raised.

---

**Note:** _You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs._

**For more information:** <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJkY2E1YzY4OS02Njg0LTQ4YzctODkwMy1lOWFlMTA2M2E1YTkiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImRjYTVjNjg5LTY2ODQtNDhjNy04OTAzLWU5YWUxMDYzYTVhOSJ9fQ=="
width="0" height="0"/>

> - 🧐 [View latest project
report](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 📜 [Customise PR
templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template)
> - 🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?pkg&#x3D;@babel/core&amp;utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades)

[//]: #
'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@babel/core","from":"7.27.4","to":"7.28.0"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"],"prId":"dca5c689-6684-48c7-8903-e9ae1063a5a9","prPublicId":"dca5c689-6684-48c7-8903-e9ae1063a5a9","packageManager":"npm","priorityScoreList":[57],"projectPublicId":"55e114f8-489e-4f14-b900-20574b041e59","projectUrl":"https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"],"upgradeInfo":{"versionsDiff":2,"publishedDate":"2025-07-02T08:38:28.293Z"},"vulns":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"]}'
mergify bot added a commit to reisene/HulajDusza-serwis that referenced this pull request Sep 15, 2025
![snyk-io[bot]](https://badgen.net/badge/icon/snyk-io%5Bbot%5D/green?label=)
![Contributor](https://badgen.net/badge/icon/Contributor/000000?label=)
[<img width="16" alt="Powered by Pull Request Badge"
src="https://user-images.githubusercontent.com/1393946/111216524-d2bb8e00-85d4-11eb-821b-ed4c00989c02.png">](https://pullrequestbadge.com/?utm_medium=github&utm_source=reisene&utm_campaign=badge_info)<!--
PR-BADGE: PLEASE DO NOT REMOVE THIS COMMENT -->


![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)


<h3>Snyk has created this PR to upgrade @babel/core from 7.28.0 to
7.28.3.</h3>

:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.

<hr/>


- The recommended version is **1 version** ahead of your current
version.

- The recommended version was released **a month ago**.

#### Issues fixed by the recommended upgrade:

|  | Issue | Score | Exploit Maturity |

:-------------------------:|:-------------------------|:-------------------------|:-------------------------
![low
severity](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests//severity-low.svg
'low severity') | Regular Expression Denial of Service
(ReDoS)<br/>[SNYK-JS-BRACEEXPANSION-9789073](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073)
| **57** | Proof of Concept
![low
severity](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests//severity-low.svg
'low severity') | Regular Expression Denial of Service
(ReDoS)<br/>[SNYK-JS-BRACEEXPANSION-9789073](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073)
| **57** | Proof of Concept



<details>
<summary><b>Release notes</b></summary>
<br/>
  <details>
    <summary>Package name: <b>@babel/core</b></summary>
    <ul>
      <li>
<b>7.28.3</b> - <a
href="https://redirect.github.com/babel/babel/releases/tag/v7.28.3">2025-08-14</a></br><h2>v7.28.3
(2025-08-14)</h2>
<h4>👓 Spec Compliance</h4>
<ul>
<li><code>babel-helper-create-class-features-plugin</code>,
<code>babel-plugin-proposal-decorators</code>,
<code>babel-plugin-transform-class-static-block</code>,
<code>babel-preset-env</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17443"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17443/hovercard">#17443</a>
[static blocks] Do not inject new static fields after static code (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
</ul>
</li>
</ul>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17465"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17465/hovercard">#17465</a>
fix(parser/typescript): parse <code>import("./a", {with:{},})</code> (<a
href="https://redirect.github.com/easrng">@ easrng</a>)</li>
<li><a href="https://redirect.github.com/babel/babel/pull/17478"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17478/hovercard">#17478</a>
fix(parser): stop subscript parsing on async arrow (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
</ul>
<h4>💅 Polish</h4>
<ul>
<li><code>babel-plugin-transform-regenerator</code>,
<code>babel-plugin-transform-runtime</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17363"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17363/hovercard">#17363</a> Do not
save last yield in call in temp var (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
</ul>
</li>
</ul>
<h4>📝 Documentation</h4>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17448"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17448/hovercard">#17448</a> move
eslint-{parser,plugin} docs to the website (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
<h4>🏠 Internal</h4>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17454"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17454/hovercard">#17454</a> Enable
type checking for <code>scripts</code> and <code>babel-worker.cjs</code>
(<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
<h4>🔬 Output optimization</h4>
<ul>
<li><code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-proposal-do-expressions</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17444"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17444/hovercard">#17444</a>
Optimize do expression output (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 5</h4>
<ul>
<li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@
babel-bot</a>)</li>
<li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
<li>Jam Balaya (<a href="https://redirect.github.com/JamBalaya56562">@
JamBalaya56562</a>)</li>
<li>Nicolò Ribaudo (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
<li>easrng (<a href="https://redirect.github.com/easrng">@
easrng</a>)</li>
</ul>
      </li>
      <li>
<b>7.28.0</b> - <a
href="https://redirect.github.com/babel/babel/releases/tag/v7.28.0">2025-07-02</a></br><h2>v7.28.0
(2025-07-02)</h2>
<h4>🚀 New Feature</h4>
<ul>
<li><code>babel-node</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17147"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17147/hovercard">#17147</a>
Support top level await in node repl (<a
href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li>
</ul>
</li>
<li><code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17258"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17258/hovercard">#17258</a>
feat(matchesPattern): support super/private/meta (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-compat-data</code>, <code>babel-preset-env</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17355"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17355/hovercard">#17355</a> Add
explicit resource management to preset-env (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-core</code>, <code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17390"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17390/hovercard">#17390</a>
Support <code>sourceType: "commonjs"</code> (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-generator</code>, <code>babel-parser</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17346"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17346/hovercard">#17346</a>
Materialize <code>explicitResourceManagement</code> parser plugin (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-proposal-do-expressions</code>,
<code>babel-plugin-transform-object-rest-spread</code>,
<code>babel-traverse</code>, <code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17391"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17391/hovercard">#17391</a> LVal
coverage updates (Part 2) (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-parser</code>, <code>babel-traverse</code>,
<code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17378"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17378/hovercard">#17378</a> Accept
bigints in <code>t.bigIntLiteral</code> factory (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-generator</code>,
<code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-proposal-discard-binding</code>,
<code>babel-plugin-transform-destructuring</code>,
<code>babel-plugin-transform-explicit-resource-management</code>,
<code>babel-plugin-transform-react-display-name</code>,
<code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17277"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17277/hovercard">#17277</a>
Transform discard binding (<a
href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-generator</code>, <code>babel-parser</code>,
<code>babel-plugin-proposal-destructuring-private</code>,
<code>babel-plugin-transform-block-scoping</code>,
<code>babel-plugin-transform-object-rest-spread</code>,
<code>babel-plugin-transform-typescript</code>,
<code>babel-traverse</code>, <code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17163"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17163/hovercard">#17163</a> Parse
discard binding (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
</ul>
</li>
</ul>
<h4>🐛 Bug Fix</h4>
<ul>
<li><code>babel-helper-globals</code>,
<code>babel-plugin-transform-classes</code>, <code>babel-traverse</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17297"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17297/hovercard">#17297</a> Create
babel-helper-globals (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
</ul>
</li>
<li><code>babel-types</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17009"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17009/hovercard">#17009</a>
feature: TSTypeOperator: keyof (<a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="2502652054"
data-permission-text="Title is private"
data-url="babel/babel#16799"
data-hovercard-type="issue"
data-hovercard-url="/babel/babel/issues/16799/hovercard"
href="https://redirect.github.com/babel/babel/issues/16799">#16799</a>)
(<a href="https://redirect.github.com/coderaiser">@ coderaiser</a>)</li>
</ul>
</li>
</ul>
<h4>🏠 Internal</h4>
<ul>
<li><code>babel-compat-data</code>,
<code>babel-plugin-proposal-decorators</code>,
<code>babel-plugin-transform-async-generator-functions</code>,
<code>babel-plugin-transform-json-modules</code>,
<code>babel-plugin-transform-regenerator</code>,
<code>babel-plugin-transform-runtime</code>,
<code>babel-preset-env</code>, <code>babel-runtime-corejs3</code>
<ul>
<li><a href="https://redirect.github.com/babel/babel/pull/17403"
data-hovercard-type="pull_request"
data-hovercard-url="/babel/babel/pull/17403/hovercard">#17403</a> Update
<code>babel-polyfill</code> packages (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
</ul>
</li>
</ul>
<h4>Committers: 5</h4>
<ul>
<li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@
babel-bot</a>)</li>
<li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@
JLHwung</a>)</li>
<li>Nicolò Ribaudo (<a
href="https://redirect.github.com/nicolo-ribaudo">@
nicolo-ribaudo</a>)</li>
<li><a href="https://redirect.github.com/liuxingbaoyu">@
liuxingbaoyu</a></li>
<li>coderaiser (<a href="https://redirect.github.com/coderaiser">@
coderaiser</a>)</li>
</ul>
      </li>
    </ul>
from <a
href="https://redirect.github.com/babel/babel/releases">@babel/core
GitHub release notes</a>
  </details>
</details>

---

> [!IMPORTANT]
>
> - Check the changes in this PR to ensure they won't cause issues with
your project.
> - This PR was automatically created by Snyk using the credentials of a
real user.
> - Max score is 1000. Note that the real score may have changed since
the PR was raised.

---

**Note:** _You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs._

**For more information:** <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI3NWI5ZGJmMC02NDhhLTQ0NTYtOWEzMy05ZmE4ZjdjMjk1NTMiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6Ijc1YjlkYmYwLTY0OGEtNDQ1Ni05YTMzLTlmYThmN2MyOTU1MyJ9fQ=="
width="0" height="0"/>

> - 🧐 [View latest project
report](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 📜 [Customise PR
templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template)
> - 🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?pkg&#x3D;@babel/core&amp;utm_source&#x3D;github-cloud-app&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades)

[//]: #
'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@babel/core","from":"7.28.0","to":"7.28.3"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"],"prId":"75b9dbf0-648a-4456-9a33-9fa8f7c29553","prPublicId":"75b9dbf0-648a-4456-9a33-9fa8f7c29553","packageManager":"npm","priorityScoreList":[57],"projectPublicId":"55e114f8-489e-4f14-b900-20574b041e59","projectUrl":"https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2025-08-14T12:36:21.762Z"},"vulns":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"]}'
@github-actions github-actions bot added the outdated A closed issue/PR that is archived due to age. Recommended to make a new issue label Sep 29, 2025
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 29, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

outdated A closed issue/PR that is archived due to age. Recommended to make a new issue pkg: parser PR: New Feature 🚀 A type of pull request used for our changelog categories PR: Ready to be Merged A pull request with already two approvals, but waiting for the next minor release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Option to allow top level using in script

5 participants