Bump the parsing-minor-updates group across 1 directory with 2 updates by dependabot[bot] · Pull Request #1199 · ossf/package-analysis

dependabot · 2026-09-25T22:42:46Z

Bumps the parsing-minor-updates group with 2 updates in the /internal/staticanalysis/parsing directory: @babel/parser and @babel/traverse.

Updates @babel/parser from 8.0.4 to 8.0.7

Release notes

Sourced from @babel/parser's releases.

v8.0.7 (2026-10-07)

Thanks @brunoborta, @CINC0S, @hoobnn, and @jpradelle for your first PRs!

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18265 Return false for #x in on static private fields before initialization (@hoobnn)

babel-traverse

#18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@CINC0S)

#18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@wulu007)

Other

#18257 Fix eslint-parser AST definition of AccessorProperty (@jpradelle)

babel-core

#18254 fix(core): createConfigItem allows cb as 2nd arg (@JLHwung)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18255 Simplify interopRequireWildcard helper (@nicolo-ribaudo)

Committers: 11

Babel Bot (@babel-bot)

Bruno "Borta" Bortagaray (@brunoborta)

CINC05 (@CINC0S)

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joelle-a-dev)

Julien Pradelle (@jpradelle)

Kevin Deng (@sxzz)

Nicolò Ribaudo (@nicolo-ribaudo)

Samual Norman (@samualtnorman)

@wulu007

hoobnn (@hoobnn)

v8.0.6 (2026-09-18)

Thanks @robhogan for your first PR!

👓 Spec Compliance

babel-helper-validator-identifier, babel-parser

... (truncated)

Changelog

Sourced from @babel/parser's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18265 Return false for #x in on static private fields before initialization (@hoobnn)

babel-traverse

#18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@CINC0S)

#18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@wulu007)

Other

#18257 Fix eslint-parser AST definition of AccessorProperty (@jpradelle)

babel-core

#18254 fix(core): createConfigItem allows cb as 2nd arg (@JLHwung)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18255 Simplify interopRequireWildcard helper (@nicolo-ribaudo)

v8.0.6 (2026-09-18)

👓 Spec Compliance

babel-helper-validator-identifier, babel-parser

#18237 Update identifier definition to Unicode 18 (@JLHwung)

🐛 Bug Fix

babel-parser

#18240 Fix parsing of arrow function params inside ternaries with Flow (@robhogan)

babel-helper-string-parser, babel-parser

#18239 fix: polish error message for invalid binary 0b19 (@JLHwung)

🏠 Internal

babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types

#18235 Remove unused internal exports (@nicolo-ribaudo)

babel-parser

#18245 test: test with ts-eslint 8.70.0 (@JLHwung)

babel-core

#18231 build: do not emit sourcemap in production build (@JLHwung)

babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

#18236 Enforce usage of Yarn catalog for reused dependencies (@nicolo-ribaudo)

... (truncated)

Commits

1fc0073 v8.0.7
5f17a76 fix(parser): allow await as a function expression name inside async arrow (#1...
9e408d6 v8.0.6
753bedf Remove unused internal exports (#18235)
dc9f9cf test: test with ts-eslint 8.70.0 (#18245)
fb7920d Update identifier definition to Unicode 18 (#18237)
87fee9e Fix parsing of arrow function params inside ternaries with Flow (#18240)
a31ccb6 fix: polish error message for invalid binary 0b19 (#18239)
8b01fec Enforce usage of Yarn catalog for reused dependencies (#18236)
0d8ed70 v8.0.5
Additional commits viewable in compare view

Updates @babel/traverse from 8.0.4 to 8.0.7

Release notes

Sourced from @babel/traverse's releases.

v8.0.7 (2026-10-07)

Thanks @brunoborta, @CINC0S, @hoobnn, and @jpradelle for your first PRs!

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18265 Return false for #x in on static private fields before initialization (@hoobnn)

babel-traverse

#18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@CINC0S)

#18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@wulu007)

Other

#18257 Fix eslint-parser AST definition of AccessorProperty (@jpradelle)

babel-core

#18254 fix(core): createConfigItem allows cb as 2nd arg (@JLHwung)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18255 Simplify interopRequireWildcard helper (@nicolo-ribaudo)

Committers: 11

Babel Bot (@babel-bot)

Bruno "Borta" Bortagaray (@brunoborta)

CINC05 (@CINC0S)

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joelle-a-dev)

Julien Pradelle (@jpradelle)

Kevin Deng (@sxzz)

Nicolò Ribaudo (@nicolo-ribaudo)

Samual Norman (@samualtnorman)

@wulu007

hoobnn (@hoobnn)

v8.0.6 (2026-09-18)

Thanks @robhogan for your first PR!

👓 Spec Compliance

babel-helper-validator-identifier, babel-parser

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18265 Return false for #x in on static private fields before initialization (@hoobnn)

babel-traverse

#18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@CINC0S)

#18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@wulu007)

Other

#18257 Fix eslint-parser AST definition of AccessorProperty (@jpradelle)

babel-core

#18254 fix(core): createConfigItem allows cb as 2nd arg (@JLHwung)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18255 Simplify interopRequireWildcard helper (@nicolo-ribaudo)

v8.0.6 (2026-09-18)

👓 Spec Compliance

babel-helper-validator-identifier, babel-parser

#18237 Update identifier definition to Unicode 18 (@JLHwung)

🐛 Bug Fix

babel-parser

#18240 Fix parsing of arrow function params inside ternaries with Flow (@robhogan)

babel-helper-string-parser, babel-parser

#18239 fix: polish error message for invalid binary 0b19 (@JLHwung)

🏠 Internal

babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types

#18235 Remove unused internal exports (@nicolo-ribaudo)

babel-parser

#18245 test: test with ts-eslint 8.70.0 (@JLHwung)

babel-core

#18231 build: do not emit sourcemap in production build (@JLHwung)

babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

#18236 Enforce usage of Yarn catalog for reused dependencies (@nicolo-ribaudo)

... (truncated)

Commits

1fc0073 v8.0.7
c5b07a5 Evaluate TypeScript expression wrappers in NodePath#evaluate (#18151)
f92e1af fix(traverse): do not evaluate destructured bindings in path.evaluate (#18250)
9e408d6 v8.0.6
753bedf Remove unused internal exports (#18235)
8b01fec Enforce usage of Yarn catalog for reused dependencies (#18236)
0d8ed70 v8.0.5
d061c26 fix(remove): unwrap single sequence expression (#18183)
1e5eb95 Handle null in getAll{Prev,Next}Siblings (#18153)
8728a5f Fix top-level enter and exit visitor types (#18129)
Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

calebbrown · 2026-10-27T00:24:57Z

@dependabot rebase

Bumps the parsing-minor-updates group with 2 updates in the /internal/staticanalysis/parsing directory: [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) and [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse). Updates `@babel/parser` from 8.0.4 to 8.0.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-parser) Updates `@babel/traverse` from 8.0.4 to 8.0.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-traverse) --- updated-dependencies: - dependency-name: "@babel/parser" dependency-version: 8.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: parsing-minor-updates - dependency-name: "@babel/traverse" dependency-version: 8.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: parsing-minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 25, 2026

dependabot Bot changed the title ~~Bump the parsing-minor-updates group in /internal/staticanalysis/parsing with 2 updates~~ Bump the parsing-minor-updates group across 1 directory with 2 updates Oct 27, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/internal/staticanalysis/parsing/parsing-minor-updates-7a56017c82 branch from 70e83b3 to 99174fb Compare October 27, 2026 00:26

calebbrown approved these changes Oct 27, 2026

View reviewed changes

calebbrown merged commit 5895089 into main Oct 27, 2026
12 checks passed

calebbrown deleted the dependabot/npm_and_yarn/internal/staticanalysis/parsing/parsing-minor-updates-7a56017c82 branch October 27, 2026 00:40

Navigation Menu

Repository navigation

Bump the parsing-minor-updates group across 1 directory with 2 updates - #1199

Bump the parsing-minor-updates group across 1 directory with 2 updates#1199
calebbrown merged 1 commit into
mainfrom
dependabot/npm_and_yarn/internal/staticanalysis/parsing/parsing-minor-updates-7a56017c82

dependabot Bot commented on behalf of github Sep 25, 2026 •

edited

Loading

Uh oh!

calebbrown commented Oct 27, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.0.7 (2026-10-07)

🐛 Bug Fix

🏠 Internal

Committers: 11

v8.0.6 (2026-09-18)

👓 Spec Compliance

v8.0.7 (2026-10-07)

🐛 Bug Fix

🏠 Internal

v8.0.6 (2026-09-18)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

v8.0.7 (2026-10-07)

🐛 Bug Fix

🏠 Internal

Committers: 11

v8.0.6 (2026-09-18)

👓 Spec Compliance

v8.0.7 (2026-10-07)

🐛 Bug Fix

🏠 Internal

v8.0.6 (2026-09-18)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Uh oh!

calebbrown commented Oct 27, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 25, 2026 •

edited

Loading