Repository navigation
chore(deps-dev): bump @babel/core from 7.29.7 to 8.0.10 - #1113
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.29.7 to 8.0.10. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.10/packages/babel-core) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 8.0.10 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit dd47920. Configure here.
| }, | ||
| "devDependencies": { | ||
| "@babel/core": "^7.29.7", | ||
| "@babel/core": "^8.0.10", |
There was a problem hiding this comment.
Babel 8 core breaks Babel 7 toolchain
High Severity
Bumping only @babel/core to 8 leaves Babel 7 plugins, presets, and CLI in place. Expo SDK 58 (babel-preset-expo, metro-babel-transformer, @expo/metro-config) still depends on @babel/core ^7, and those plugins call assertVersion(7), so Metro can fail to transform. In @knocklabs/client, @babel/cli, @babel/preset-env, and the proposal plugins likewise peer-depend on core 7. Babel 8 is also ESM-only and requires Node ^22.18.0 || >=24.11.0, which conflicts with the Expo example engines pin of 22.17.0.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit dd47920. Configure here.
There was a problem hiding this comment.
Approved this Dependabot major bump of @babel/core (7.29.7 → 8.0.10). CI is green (test, Metro, React 18/19, Vercel), and the exercised usage (Expo Metro plus Vite for @knocklabs/client) does not show a break; Bugbot’s mixed 7/8 toolchain note is noted but not borne out by those checks. No reviewers were assigned.
Sent by Cursor Approval Agent: Depdency updates (control, switchboard, CLI, javascript, telegraph)
|
Superseded by #1120. |




Bumps @babel/core from 7.29.7 to 8.0.10.
Release notes
Sourced from @babel/core's releases.
... (truncated)
Changelog
Sourced from @babel/core's changelog.
... (truncated)
Commits
a4f3b3ev8.0.100b1ff08Mangle top level names in helpers (#18397)f9c9445v8.0.91fc0073v8.0.7d23b2fdfix(core): createConfigItem allows cb as 2nd arg (#18254)fd66590chore: upgrade verkit to v0.5.0 and obug to v3.0.0 (#18248)9e408d6v8.0.6753bedfRemove unused internal exports (#18235)e80c9acbuild: do not emit sourcemap in production build (#18231)8b01fecEnforce usage of Yarn catalog for reused dependencies (#18236)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)