Skip to content

Update @babel/plugin-preset-env to 7.29.7#8332

Open
g1rly-c0d3r wants to merge 4 commits into
mainfrom
issue-8331
Open

Update @babel/plugin-preset-env to 7.29.7#8332
g1rly-c0d3r wants to merge 4 commits into
mainfrom
issue-8331

Conversation

@g1rly-c0d3r

@g1rly-c0d3r g1rly-c0d3r commented Jul 21, 2026

Copy link
Copy Markdown
Collaborator

Fixes #8331

https://github.com/specify/specify7/security/dependabot/231

Bump @babel/plugin-preset-env version to 7.29.7 to address the above security concern.

Checklist

  • Self-review the PR after opening it to make sure the changes look good and
    self-explanatory (or properly documented)
  • Add relevant issue to release milestone

Testing instructions

Summary by CodeRabbit

  • Chores
    • Updated the Babel environment preset used during development and builds.
    • No user-facing functionality changes.

@github-actions

Copy link
Copy Markdown

Warning

One or more dependencies are approaching or past End-of-Life.
Please plan upgrades accordingly.

STATUS=WARNING
NODE_VERSION=20
NODE_CYCLE=20
EOL_DATE=2026-04-30
DAYS_REMAINING=-82

--- Node.js ---
Version: 20
EOL: 2026-04-30
Status: WARNING

STATUS=OK
PYTHON_VERSION=3.12
PYTHON_CYCLE=3.12
EOL_DATE=2028-10-31
DAYS_REMAINING=833

--- Python ---
Version: 3.12
EOL: 2028-10-31
Status: OK

STATUS=WARNING
DJANGO_VERSION=4.2
DJANGO_CYCLE=4.2
EOL_DATE=2026-04-07
DAYS_REMAINING=-105

--- Django ---
Version: 4.2
EOL: 2026-04-07
Status: WARNING


@coderabbitai

coderabbitai Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 41092de2-d1f3-425a-844c-94c5cbd35664

📥 Commits

Reviewing files that changed from the base of the PR and between a255ef8 and 8449204.

⛔ Files ignored due to path filters (1)
  • specifyweb/frontend/js_src/package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • specifyweb/frontend/js_src/package.json

📝 Walkthrough

Walkthrough

Updates the frontend JavaScript development dependency @babel/preset-env from ^7.18.9 to ^7.29.7.

Changes

Babel dependency update

Layer / File(s) Summary
Update Babel preset-env version
specifyweb/frontend/js_src/package.json
The @babel/preset-env development dependency constraint changes from ^7.18.9 to ^7.29.7.

Possibly related PRs

Suggested reviewers: carolinedenis

🚥 Pre-merge checks | ✅ 5 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Testing Instructions ⚠️ Warning The PR’s Testing instructions section is blank, so it doesn’t clearly explain how to verify the frontend dependency bump in js_src/package.json. Add concrete frontend validation steps for this change, e.g. npm run test or at least typecheck/unitTests in specifyweb/frontend/js_src.
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title matches the dependency update, though it uses the slightly wrong package name.
Linked Issues check ✅ Passed Updating @babel/preset-env to 7.29.7 aligns with the security fix for the transitive systemjs transform vulnerability.
Out of Scope Changes check ✅ Passed The only reviewable change is the intended dependency version bump, with no clear unrelated modifications.
Automatic Tests ✅ Passed PASS — the PR only changes package.json and package-lock.json; no source or test files were added, so extra automatic tests weren’t necessary.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch issue-8331

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@CarolineDenis CarolineDenis added this to the 7.12.1 milestone Jul 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: 📋Back Log

Development

Successfully merging this pull request may close these issues.

@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input

2 participants