-
-
Notifications
You must be signed in to change notification settings - Fork 5.8k
Support sourceType: "commonjs"
#17390
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Build successful! You can test your changes in the REPL here: https://babeljs.io/repl/build/59664 |
c769278 to
2478fe6
Compare
| // https://eslint.org/docs/latest/use/configure/language-options#specifying-javascript-options | ||
| // ESLint supports "commonjs" but Babel parser does not. | ||
| sourceType: sourceType === "commonjs" ? "script" : sourceType, | ||
| sourceType, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@babel/core is a peer dependency, we should probably check if we are on a version that supports commonjs.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK, though it was the previous behavior before #17349.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| * "unambiguous" will make @babel/parser attempt to guess, based on the presence | ||
| * of ES6 import or export statements. | ||
| * Files with ES6 imports and exports are considered "module" and are otherwise "script". |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If there is a top-level return, I guess we could make unambiguous mean commonjs? I don't know if it's useful.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The current behaviour is to throw illegal top level return. Since no one ever complaints about it and we may have a babel-tempalte sourceType in the future, I lean toward keeping the scope of unambiguous as-is.
This seems to be the same as #17149 (comment) ? |
Yes. While on one hand
|
Ah, actually I thought so at first. :) The new feature sounds good to me, except I'm not sure about removing the |
nicolo-ribaudo
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd love to remove the allow* options in the feature -- we should look through issues/PRs where they have been added to make sure we are still covering all the use cases though.
I'd be fine with deferring it to Babel 9.
709bf48 to
8b6fcff
Compare
| // your babel options | ||
| presets: ["@babel/preset-env"], | ||
| ```js | ||
| module.exports = { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should this update to eslint.config.js format?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah probably, I would also like to move them to the website as well. Of course that will be better addressed in another PR.
![snyk-io[bot]](https://badgen.net/badge/icon/snyk-io%5Bbot%5D/green?label=)  [<img width="16" alt="Powered by Pull Request Badge" src="https://user-images.githubusercontent.com/1393946/111216524-d2bb8e00-85d4-11eb-821b-ed4c00989c02.png">](https://pullrequestbadge.com/?utm_medium=github&utm_source=reisene&utm_campaign=badge_info)<!-- PR-BADGE: PLEASE DO NOT REMOVE THIS COMMENT -->  <h3>Snyk has created this PR to upgrade @babel/core from 7.27.4 to 7.28.0.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **2 versions** ahead of your current version. - The recommended version was released **a month ago**. #### Issues fixed by the recommended upgrade: | | Issue | Score | Exploit Maturity | :-------------------------:|:-------------------------|:-------------------------|:-------------------------  | Regular Expression Denial of Service (ReDoS)<br/>[SNYK-JS-BRACEEXPANSION-9789073](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073) | **57** | Proof of Concept  | Regular Expression Denial of Service (ReDoS)<br/>[SNYK-JS-BRACEEXPANSION-9789073](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073) | **57** | Proof of Concept <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@babel/core</b></summary> <ul> <li> <b>7.28.0</b> - <a href="https://redirect.github.com/babel/babel/releases/tag/v7.28.0">2025-07-02</a></br><h2>v7.28.0 (2025-07-02)</h2> <h4>🚀 New Feature</h4> <ul> <li><code>babel-node</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17147" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17147/hovercard">#17147</a> Support top level await in node repl (<a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li> </ul> </li> <li><code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17258" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17258/hovercard">#17258</a> feat(matchesPattern): support super/private/meta (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-compat-data</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17355" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17355/hovercard">#17355</a> Add explicit resource management to preset-env (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-core</code>, <code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17390" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17390/hovercard">#17390</a> Support <code>sourceType: "commonjs"</code> (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-generator</code>, <code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17346" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17346/hovercard">#17346</a> Materialize <code>explicitResourceManagement</code> parser plugin (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-plugin-proposal-destructuring-private</code>, <code>babel-plugin-proposal-do-expressions</code>, <code>babel-plugin-transform-object-rest-spread</code>, <code>babel-traverse</code>, <code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17391" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17391/hovercard">#17391</a> LVal coverage updates (Part 2) (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-parser</code>, <code>babel-traverse</code>, <code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17378" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17378/hovercard">#17378</a> Accept bigints in <code>t.bigIntLiteral</code> factory (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-generator</code>, <code>babel-plugin-proposal-destructuring-private</code>, <code>babel-plugin-proposal-discard-binding</code>, <code>babel-plugin-transform-destructuring</code>, <code>babel-plugin-transform-explicit-resource-management</code>, <code>babel-plugin-transform-react-display-name</code>, <code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17277" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17277/hovercard">#17277</a> Transform discard binding (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-generator</code>, <code>babel-parser</code>, <code>babel-plugin-proposal-destructuring-private</code>, <code>babel-plugin-transform-block-scoping</code>, <code>babel-plugin-transform-object-rest-spread</code>, <code>babel-plugin-transform-typescript</code>, <code>babel-traverse</code>, <code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17163" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17163/hovercard">#17163</a> Parse discard binding (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> </ul> <h4>🐛 Bug Fix</h4> <ul> <li><code>babel-helper-globals</code>, <code>babel-plugin-transform-classes</code>, <code>babel-traverse</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17297" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17297/hovercard">#17297</a> Create babel-helper-globals (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17009" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17009/hovercard">#17009</a> feature: TSTypeOperator: keyof (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2502652054" data-permission-text="Title is private" data-url="babel/babel#16799" data-hovercard-type="issue" data-hovercard-url="/babel/babel/issues/16799/hovercard" href="https://redirect.github.com/babel/babel/issues/16799">#16799</a>) (<a href="https://redirect.github.com/coderaiser">@ coderaiser</a>)</li> </ul> </li> </ul> <h4>🏠 Internal</h4> <ul> <li><code>babel-compat-data</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-json-modules</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs3</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17403" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17403/hovercard">#17403</a> Update <code>babel-polyfill</code> packages (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> </ul> </li> </ul> <h4>Committers: 5</h4> <ul> <li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@ babel-bot</a>)</li> <li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> <li>Nicolò Ribaudo (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> <li><a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a></li> <li>coderaiser (<a href="https://redirect.github.com/coderaiser">@ coderaiser</a>)</li> </ul> </li> <li> <b>7.27.7</b> - <a href="https://redirect.github.com/babel/babel/releases/tag/v7.27.7">2025-06-26</a></br><h2>v7.27.7 (2025-06-26)</h2> <p>Thanks <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/arthur-mountain/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/arthur-mountain">@ arthur-mountain</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/evankanderson/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://redirect.github.com/evankanderson">@ evankanderson</a> for your first PRs!</p> <h4>👓 Spec Compliance</h4> <ul> <li><code>babel-parser</code>, <code>babel-plugin-transform-classes</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17203" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17203/hovercard">#17203</a> Interepret parser <code>allow*</code> options as top level only (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17371" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17371/hovercard">#17371</a> fix: disable using in ambient context (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> </ul> <h4>🐛 Bug Fix</h4> <ul> <li><code>babel-core</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17392" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17392/hovercard">#17392</a> Improve TS babel config loading (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17376" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17376/hovercard">#17376</a> fix: support negative bigint in valueToNode (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-plugin-transform-parameters</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17352" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17352/hovercard">#17352</a> fix: Params of <code>async function*</code> should throw synchronously (<a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li> </ul> </li> </ul> <h4>🏠 Internal</h4> <ul> <li><code>babel-plugin-transform-destructuring</code>, <code>babel-plugin-transform-object-rest-spread</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17389" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17389/hovercard">#17389</a> Use <code>NodePath#splitExportDeclaration</code> in destructuring transforms (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> </ul> <h4>Committers: 6</h4> <ul> <li>Arthur (<a href="https://redirect.github.com/arthur-mountain">@ arthur-mountain</a>)</li> <li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@ babel-bot</a>)</li> <li>Evan Anderson (<a href="https://redirect.github.com/evankanderson">@ evankanderson</a>)</li> <li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> <li>Nicolò Ribaudo (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> <li><a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a></li> </ul> </li> <li> <b>7.27.4</b> - <a href="https://redirect.github.com/babel/babel/releases/tag/v7.27.4">2025-05-30</a></br><h2>v7.27.4 (2025-05-30)</h2> <h4>👓 Spec Compliance</h4> <ul> <li><code>babel-parser</code>, <code>babel-plugin-proposal-explicit-resource-management</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17323" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17323/hovercard">#17323</a> Disallow using in bare case statement (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> </ul> <h4>💅 Polish</h4> <ul> <li><code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17311" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17311/hovercard">#17311</a> Improve parseExpression error messages (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> </ul> <h4>🔬 Output optimization</h4> <ul> <li><code>babel-helpers</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-async-to-generator</code>, <code>babel-plugin-transform-block-scoping</code>, <code>babel-plugin-transform-classes</code>, <code>babel-plugin-transform-destructuring</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs2</code>, <code>babel-runtime-corejs3</code>, <code>babel-runtime</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17287" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17287/hovercard">#17287</a> Reduce <code>regenerator</code> size more (<a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li> </ul> </li> <li><code>babel-helpers</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-async-to-generator</code>, <code>babel-plugin-transform-block-scoping</code>, <code>babel-plugin-transform-classes</code>, <code>babel-plugin-transform-destructuring</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs3</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17334" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17334/hovercard">#17334</a> Use shorter method names for regenerator context (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> <li><a href="https://redirect.github.com/babel/babel/pull/17268" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17268/hovercard">#17268</a> Reduce <code>regenerator</code> helper size (<a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li> </ul> </li> <li><code>babel-core</code>, <code>babel-helpers</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-async-to-generator</code>, <code>babel-plugin-transform-block-scoping</code>, <code>babel-plugin-transform-classes</code>, <code>babel-plugin-transform-destructuring</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs2</code>, <code>babel-runtime-corejs3</code>, <code>babel-runtime</code>, <code>babel-standalone</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17238" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17238/hovercard">#17238</a> Split <code>regeneratorRuntime</code> into multiple helpers (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> </ul> </li> </ul> <h4>Committers: 4</h4> <ul> <li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@ babel-bot</a>)</li> <li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> <li>Nicolò Ribaudo (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> <li><a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a></li> </ul> </li> </ul> from <a href="https://redirect.github.com/babel/babel/releases">@babel/core GitHub release notes</a> </details> </details> --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - This PR was automatically created by Snyk using the credentials of a real user. > - Max score is 1000. Note that the real score may have changed since the PR was raised. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs._ **For more information:** <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJkY2E1YzY4OS02Njg0LTQ4YzctODkwMy1lOWFlMTA2M2E1YTkiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImRjYTVjNjg5LTY2ODQtNDhjNy04OTAzLWU5YWUxMDYzYTVhOSJ9fQ==" width="0" height="0"/> > - 🧐 [View latest project report](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr) > - 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template) > - 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr) > - 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?pkg=@babel/core&utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades) [//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@babel/core","from":"7.27.4","to":"7.28.0"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"],"prId":"dca5c689-6684-48c7-8903-e9ae1063a5a9","prPublicId":"dca5c689-6684-48c7-8903-e9ae1063a5a9","packageManager":"npm","priorityScoreList":[57],"projectPublicId":"55e114f8-489e-4f14-b900-20574b041e59","projectUrl":"https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"],"upgradeInfo":{"versionsDiff":2,"publishedDate":"2025-07-02T08:38:28.293Z"},"vulns":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"]}'
![snyk-io[bot]](https://badgen.net/badge/icon/snyk-io%5Bbot%5D/green?label=)  [<img width="16" alt="Powered by Pull Request Badge" src="https://user-images.githubusercontent.com/1393946/111216524-d2bb8e00-85d4-11eb-821b-ed4c00989c02.png">](https://pullrequestbadge.com/?utm_medium=github&utm_source=reisene&utm_campaign=badge_info)<!-- PR-BADGE: PLEASE DO NOT REMOVE THIS COMMENT -->  <h3>Snyk has created this PR to upgrade @babel/core from 7.28.0 to 7.28.3.</h3> :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. <hr/> - The recommended version is **1 version** ahead of your current version. - The recommended version was released **a month ago**. #### Issues fixed by the recommended upgrade: | | Issue | Score | Exploit Maturity | :-------------------------:|:-------------------------|:-------------------------|:-------------------------  | Regular Expression Denial of Service (ReDoS)<br/>[SNYK-JS-BRACEEXPANSION-9789073](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073) | **57** | Proof of Concept  | Regular Expression Denial of Service (ReDoS)<br/>[SNYK-JS-BRACEEXPANSION-9789073](https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073) | **57** | Proof of Concept <details> <summary><b>Release notes</b></summary> <br/> <details> <summary>Package name: <b>@babel/core</b></summary> <ul> <li> <b>7.28.3</b> - <a href="https://redirect.github.com/babel/babel/releases/tag/v7.28.3">2025-08-14</a></br><h2>v7.28.3 (2025-08-14)</h2> <h4>👓 Spec Compliance</h4> <ul> <li><code>babel-helper-create-class-features-plugin</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-transform-class-static-block</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17443" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17443/hovercard">#17443</a> [static blocks] Do not inject new static fields after static code (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> </ul> </li> </ul> <h4>🐛 Bug Fix</h4> <ul> <li><code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17465" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17465/hovercard">#17465</a> fix(parser/typescript): parse <code>import("./a", {with:{},})</code> (<a href="https://redirect.github.com/easrng">@ easrng</a>)</li> <li><a href="https://redirect.github.com/babel/babel/pull/17478" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17478/hovercard">#17478</a> fix(parser): stop subscript parsing on async arrow (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> </ul> <h4>💅 Polish</h4> <ul> <li><code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17363" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17363/hovercard">#17363</a> Do not save last yield in call in temp var (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> </ul> </li> </ul> <h4>📝 Documentation</h4> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17448" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17448/hovercard">#17448</a> move eslint-{parser,plugin} docs to the website (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> <h4>🏠 Internal</h4> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17454" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17454/hovercard">#17454</a> Enable type checking for <code>scripts</code> and <code>babel-worker.cjs</code> (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> <h4>🔬 Output optimization</h4> <ul> <li><code>babel-plugin-proposal-destructuring-private</code>, <code>babel-plugin-proposal-do-expressions</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17444" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17444/hovercard">#17444</a> Optimize do expression output (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> </ul> <h4>Committers: 5</h4> <ul> <li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@ babel-bot</a>)</li> <li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> <li>Jam Balaya (<a href="https://redirect.github.com/JamBalaya56562">@ JamBalaya56562</a>)</li> <li>Nicolò Ribaudo (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> <li>easrng (<a href="https://redirect.github.com/easrng">@ easrng</a>)</li> </ul> </li> <li> <b>7.28.0</b> - <a href="https://redirect.github.com/babel/babel/releases/tag/v7.28.0">2025-07-02</a></br><h2>v7.28.0 (2025-07-02)</h2> <h4>🚀 New Feature</h4> <ul> <li><code>babel-node</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17147" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17147/hovercard">#17147</a> Support top level await in node repl (<a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a>)</li> </ul> </li> <li><code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17258" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17258/hovercard">#17258</a> feat(matchesPattern): support super/private/meta (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-compat-data</code>, <code>babel-preset-env</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17355" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17355/hovercard">#17355</a> Add explicit resource management to preset-env (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-core</code>, <code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17390" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17390/hovercard">#17390</a> Support <code>sourceType: "commonjs"</code> (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-generator</code>, <code>babel-parser</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17346" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17346/hovercard">#17346</a> Materialize <code>explicitResourceManagement</code> parser plugin (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-plugin-proposal-destructuring-private</code>, <code>babel-plugin-proposal-do-expressions</code>, <code>babel-plugin-transform-object-rest-spread</code>, <code>babel-traverse</code>, <code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17391" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17391/hovercard">#17391</a> LVal coverage updates (Part 2) (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-parser</code>, <code>babel-traverse</code>, <code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17378" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17378/hovercard">#17378</a> Accept bigints in <code>t.bigIntLiteral</code> factory (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-generator</code>, <code>babel-plugin-proposal-destructuring-private</code>, <code>babel-plugin-proposal-discard-binding</code>, <code>babel-plugin-transform-destructuring</code>, <code>babel-plugin-transform-explicit-resource-management</code>, <code>babel-plugin-transform-react-display-name</code>, <code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17277" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17277/hovercard">#17277</a> Transform discard binding (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-generator</code>, <code>babel-parser</code>, <code>babel-plugin-proposal-destructuring-private</code>, <code>babel-plugin-transform-block-scoping</code>, <code>babel-plugin-transform-object-rest-spread</code>, <code>babel-plugin-transform-typescript</code>, <code>babel-traverse</code>, <code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17163" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17163/hovercard">#17163</a> Parse discard binding (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> </ul> <h4>🐛 Bug Fix</h4> <ul> <li><code>babel-helper-globals</code>, <code>babel-plugin-transform-classes</code>, <code>babel-traverse</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17297" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17297/hovercard">#17297</a> Create babel-helper-globals (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> </ul> </li> <li><code>babel-types</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17009" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17009/hovercard">#17009</a> feature: TSTypeOperator: keyof (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2502652054" data-permission-text="Title is private" data-url="babel/babel#16799" data-hovercard-type="issue" data-hovercard-url="/babel/babel/issues/16799/hovercard" href="https://redirect.github.com/babel/babel/issues/16799">#16799</a>) (<a href="https://redirect.github.com/coderaiser">@ coderaiser</a>)</li> </ul> </li> </ul> <h4>🏠 Internal</h4> <ul> <li><code>babel-compat-data</code>, <code>babel-plugin-proposal-decorators</code>, <code>babel-plugin-transform-async-generator-functions</code>, <code>babel-plugin-transform-json-modules</code>, <code>babel-plugin-transform-regenerator</code>, <code>babel-plugin-transform-runtime</code>, <code>babel-preset-env</code>, <code>babel-runtime-corejs3</code> <ul> <li><a href="https://redirect.github.com/babel/babel/pull/17403" data-hovercard-type="pull_request" data-hovercard-url="/babel/babel/pull/17403/hovercard">#17403</a> Update <code>babel-polyfill</code> packages (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> </ul> </li> </ul> <h4>Committers: 5</h4> <ul> <li>Babel Bot (<a href="https://redirect.github.com/babel-bot">@ babel-bot</a>)</li> <li>Huáng Jùnliàng (<a href="https://redirect.github.com/JLHwung">@ JLHwung</a>)</li> <li>Nicolò Ribaudo (<a href="https://redirect.github.com/nicolo-ribaudo">@ nicolo-ribaudo</a>)</li> <li><a href="https://redirect.github.com/liuxingbaoyu">@ liuxingbaoyu</a></li> <li>coderaiser (<a href="https://redirect.github.com/coderaiser">@ coderaiser</a>)</li> </ul> </li> </ul> from <a href="https://redirect.github.com/babel/babel/releases">@babel/core GitHub release notes</a> </details> </details> --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - This PR was automatically created by Snyk using the credentials of a real user. > - Max score is 1000. Note that the real score may have changed since the PR was raised. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs._ **For more information:** <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI3NWI5ZGJmMC02NDhhLTQ0NTYtOWEzMy05ZmE4ZjdjMjk1NTMiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6Ijc1YjlkYmYwLTY0OGEtNDQ1Ni05YTMzLTlmYThmN2MyOTU1MyJ9fQ==" width="0" height="0"/> > - 🧐 [View latest project report](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr) > - 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template) > - 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr) > - 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59/settings/integration?pkg=@babel/core&utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades) [//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"@babel/core","from":"7.28.0","to":"7.28.3"}],"env":"prod","hasFixes":true,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"],"prId":"75b9dbf0-648a-4456-9a33-9fa8f7c29553","prPublicId":"75b9dbf0-648a-4456-9a33-9fa8f7c29553","packageManager":"npm","priorityScoreList":[57],"projectPublicId":"55e114f8-489e-4f14-b900-20574b041e59","projectUrl":"https://app.snyk.io/org/reisene/project/55e114f8-489e-4f14-b900-20574b041e59?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["priorityScore"],"type":"auto","upgrade":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2025-08-14T12:36:21.762Z"},"vulns":["SNYK-JS-BRACEEXPANSION-9789073","SNYK-JS-BRACEEXPANSION-9789073"]}'
This pull request introduces support for a new
commonjssourceTypein the@babel/parserand the@babel/core. WhensourceTypeiscommonjs, the program will parsed as if they are wrapped within a function body, thus allowing global return, top levelnew.targetas well as top levelusingdeclarations. In this mode, the parser will try to mirror the parsing behaviour of the Node.js cjs environment.I think this PR should resolve #17377. I plan to add another
sourceTypefor the@babel/templateusage:sourceType: "babel-template", ultimately it will be the default source type when people is constructing a Babel template. In this mode, any context-related AST restriction will be relaxed, for example:superOutsideMethod,yieldOutsideGenerator, or evenbreakRandomLabel, etc. Hopefully we can remove allallow*parser options in Babel 8.See also:
sourceType: "commonjs"option in ESLint feat: Add sourceType:commonjs support eslint/js#520sourceType: "commonjs"option in Acorn feat: add sourceType: commonjs option acornjs/acorn#1377