chore(deps): bump @babel/plugin-transform-modules-systemjs to 7.29.7 (CVE-2026-44728) (#21306)
## What Bumps the transitive dev dependency `@babel/plugin-transform-modules-systemjs` from `7.25.9` → `7.29.7` (lockfile-only). ## Why Resolves Dependabot alert **#1182** — **GHSA-fv7c-fp4j-7gwp** / **CVE-2026-44728** (high severity): > `@babel/plugin-transform-modules-systemjs` generates arbitrary code when compiling malicious input. - Vulnerable range: `>= 7.12.0, <= 7.29.3` - First patched: `7.29.4` ## How It's pulled in transitively via `@babel/preset-env` with the range `^7.25.9`, which `7.29.7` satisfies — so **only `yarn.lock` changes**, no `package.json` edits needed. The diff is confined to the `@babel/*` subtree (13 helper packages updated alongside it). ## Notes - Scope is `development` only. - The alert is currently marked *dismissed* on the security tab; opening this anyway to actually remove the vulnerable version from the lockfile. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Charles Bochet
@@ -2518,6 +2518,17 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/code-frame@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/code-frame@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/helper-validator-identifier": "npm:^7.29.7"
|
||||
js-tokens: "npm:^4.0.0"
|
||||
picocolors: "npm:^1.1.1"
|
||||
checksum: 10c0/169fc2080169a40c1760155eaaaf739bcb882df0bec76a83adbda5493645bc17270a3434b8848c494b1933e96fe1d147370001e3cda09a39f43ae30f08ef2069
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/compat-data@npm:^7.20.5, @babel/compat-data@npm:^7.22.6, @babel/compat-data@npm:^7.26.8, @babel/compat-data@npm:^7.27.2":
|
||||
version: 7.28.0
|
||||
resolution: "@babel/compat-data@npm:7.28.0"
|
||||
@@ -2610,6 +2621,19 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/generator@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/generator@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/parser": "npm:^7.29.7"
|
||||
"@babel/types": "npm:^7.29.7"
|
||||
"@jridgewell/gen-mapping": "npm:^0.3.12"
|
||||
"@jridgewell/trace-mapping": "npm:^0.3.28"
|
||||
jsesc: "npm:^3.0.2"
|
||||
checksum: 10c0/9bf72b01b5bd0ea5b1288a0e37dbd360bff2f2b1ce73342c0d40fb3db2ec3dc004ada5ffa925c5e12939a416eed59e600d562b8ecd938ce0d27dfd0eb6c6c2b7
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-annotate-as-pure@npm:^7.25.9":
|
||||
version: 7.25.9
|
||||
resolution: "@babel/helper-annotate-as-pure@npm:7.25.9"
|
||||
@@ -2710,6 +2734,13 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-globals@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/helper-globals@npm:7.29.7"
|
||||
checksum: 10c0/f38417c40b1129a1b2b519ca961b9040c8827d1444fd74068702286b91b77089431dc76b6b9d5c1496e5da2a4f3ad329c6946e688ba3fa0d1d0b3d2b4f34f36a
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-member-expression-to-functions@npm:^7.25.9":
|
||||
version: 7.25.9
|
||||
resolution: "@babel/helper-member-expression-to-functions@npm:7.25.9"
|
||||
@@ -2750,6 +2781,16 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-module-imports@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/helper-module-imports@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/traverse": "npm:^7.29.7"
|
||||
"@babel/types": "npm:^7.29.7"
|
||||
checksum: 10c0/6adf60d97356027413342a092f818d9678c4f5caff716a33e3284b5ae14e47a9e88059d421dde4ee4894691260039a12602c0e7becadc175602194b40dfa345d
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-module-transforms@npm:^7.25.9, @babel/helper-module-transforms@npm:^7.26.0, @babel/helper-module-transforms@npm:^7.27.3":
|
||||
version: 7.27.3
|
||||
resolution: "@babel/helper-module-transforms@npm:7.27.3"
|
||||
@@ -2789,6 +2830,19 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-module-transforms@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/helper-module-transforms@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/helper-module-imports": "npm:^7.29.7"
|
||||
"@babel/helper-validator-identifier": "npm:^7.29.7"
|
||||
"@babel/traverse": "npm:^7.29.7"
|
||||
peerDependencies:
|
||||
"@babel/core": ^7.0.0
|
||||
checksum: 10c0/ee5a2172c24a42be696836f4b0d947489c9729d8adf5821885cf77d1ad5333e3c447368e9a71f67df1099570490553dccf9f888ef0a92a48aa63cb086bd8c7e1
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-optimise-call-expression@npm:^7.25.9":
|
||||
version: 7.25.9
|
||||
resolution: "@babel/helper-optimise-call-expression@npm:7.25.9"
|
||||
@@ -2821,6 +2875,13 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-plugin-utils@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/helper-plugin-utils@npm:7.29.7"
|
||||
checksum: 10c0/380477a06133274a2759f9355929cb60a95e8b8fee624a1ae1fa349e1d1645b89daca456f72833f6d1062bffa12ee4271c5bf0cc5a61c0166cdc24c7591e2408
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-remap-async-to-generator@npm:^7.25.9":
|
||||
version: 7.25.9
|
||||
resolution: "@babel/helper-remap-async-to-generator@npm:7.25.9"
|
||||
@@ -2887,7 +2948,14 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-validator-identifier@npm:^7.25.9, @babel/helper-validator-identifier@npm:^7.27.1":
|
||||
"@babel/helper-string-parser@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/helper-string-parser@npm:7.29.7"
|
||||
checksum: 10c0/194bc0f1716e396d5ffde56ad6119745fb9557662c98611590e5e454906783a4ccb21ce93056b8eb69a4909044834e45d96e50ac695bbe9e3221648fe033c06c
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-validator-identifier@npm:^7.27.1":
|
||||
version: 7.27.1
|
||||
resolution: "@babel/helper-validator-identifier@npm:7.27.1"
|
||||
checksum: 10c0/c558f11c4871d526498e49d07a84752d1800bf72ac0d3dad100309a2eaba24efbf56ea59af5137ff15e3a00280ebe588560534b0e894a4750f8b1411d8f78b84
|
||||
@@ -2901,6 +2969,13 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-validator-identifier@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/helper-validator-identifier@npm:7.29.7"
|
||||
checksum: 10c0/4795354e7ae0dcafa72de1cd04ec51252dc1498517170beaf019e03effc5b7bf13c6b21a3949a77e07b8125be7f106ed1131350d8ebd4566ae874094a726d62b
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/helper-validator-option@npm:^7.24.7, @babel/helper-validator-option@npm:^7.25.9, @babel/helper-validator-option@npm:^7.27.1":
|
||||
version: 7.27.1
|
||||
resolution: "@babel/helper-validator-option@npm:7.27.1"
|
||||
@@ -2972,6 +3047,17 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/parser@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/parser@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/types": "npm:^7.29.7"
|
||||
bin:
|
||||
parser: ./bin/babel-parser.js
|
||||
checksum: 10c0/65133038f80b54a714d6027cb77cee3f9a6b5c4c6842ce674301e13947cbcbfa8055e63acaf1b84c085d34226a14425b2c2b97b829e0e226d2e8f1299942a51d
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/plugin-bugfix-firefox-class-in-computed-class-key@npm:^7.25.9":
|
||||
version: 7.25.9
|
||||
resolution: "@babel/plugin-bugfix-firefox-class-in-computed-class-key@npm:7.25.9"
|
||||
@@ -3667,16 +3753,16 @@ __metadata:
|
||||
linkType: hard
|
||||
|
||||
"@babel/plugin-transform-modules-systemjs@npm:^7.25.9":
|
||||
version: 7.25.9
|
||||
resolution: "@babel/plugin-transform-modules-systemjs@npm:7.25.9"
|
||||
version: 7.29.7
|
||||
resolution: "@babel/plugin-transform-modules-systemjs@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/helper-module-transforms": "npm:^7.25.9"
|
||||
"@babel/helper-plugin-utils": "npm:^7.25.9"
|
||||
"@babel/helper-validator-identifier": "npm:^7.25.9"
|
||||
"@babel/traverse": "npm:^7.25.9"
|
||||
"@babel/helper-module-transforms": "npm:^7.29.7"
|
||||
"@babel/helper-plugin-utils": "npm:^7.29.7"
|
||||
"@babel/helper-validator-identifier": "npm:^7.29.7"
|
||||
"@babel/traverse": "npm:^7.29.7"
|
||||
peerDependencies:
|
||||
"@babel/core": ^7.0.0-0
|
||||
checksum: 10c0/8299e3437542129c2684b86f98408c690df27db4122a79edded4782cf04e755d6ecb05b1e812c81a34224a81e664303392d5f3c36f3d2d51fdc99bb91c881e9a
|
||||
checksum: 10c0/7b950bcc4a4b077b742b9299c8c9d4285e15854e23816d0b1c1177fafda4c153f3c3c4487c1b965afbf7a69a8788fc75656d0c591b91f0a5a543faabe738ca58
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
@@ -4290,6 +4376,17 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/template@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/template@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/code-frame": "npm:^7.29.7"
|
||||
"@babel/parser": "npm:^7.29.7"
|
||||
"@babel/types": "npm:^7.29.7"
|
||||
checksum: 10c0/8bb7f900dcab0e9e1c5ffbc33ca10e0d26b7b2e2ca804becb73ee771b9c4ed6e2908a4ae4a14c08560febb45d2b6b9a173955e42ad404d05f8b04840a14d9c58
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/traverse@npm:^7.14.0, @babel/traverse@npm:^7.16.0, @babel/traverse@npm:^7.16.8, @babel/traverse@npm:^7.23.5, @babel/traverse@npm:^7.25.9, @babel/traverse@npm:^7.26.5, @babel/traverse@npm:^7.26.8, @babel/traverse@npm:^7.26.9, @babel/traverse@npm:^7.27.1, @babel/traverse@npm:^7.27.3, @babel/traverse@npm:^7.28.0":
|
||||
version: 7.28.0
|
||||
resolution: "@babel/traverse@npm:7.28.0"
|
||||
@@ -4335,6 +4432,21 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/traverse@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/traverse@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/code-frame": "npm:^7.29.7"
|
||||
"@babel/generator": "npm:^7.29.7"
|
||||
"@babel/helper-globals": "npm:^7.29.7"
|
||||
"@babel/parser": "npm:^7.29.7"
|
||||
"@babel/template": "npm:^7.29.7"
|
||||
"@babel/types": "npm:^7.29.7"
|
||||
debug: "npm:^4.3.1"
|
||||
checksum: 10c0/e256a1fbdb956555b76f3c285b1e453f6bedec8b3afb61751d99d933efd11c7d79caf5ddf2493570058a9f7deaa1b48324380d7c1aa1443fd9508becbf56331a
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/types@npm:^7.0.0, @babel/types@npm:^7.16.8, @babel/types@npm:^7.18.13, @babel/types@npm:^7.20.7, @babel/types@npm:^7.21.2, @babel/types@npm:^7.21.3, @babel/types@npm:^7.23.5, @babel/types@npm:^7.25.9, @babel/types@npm:^7.27.1, @babel/types@npm:^7.27.3, @babel/types@npm:^7.28.0, @babel/types@npm:^7.28.2, @babel/types@npm:^7.3.3, @babel/types@npm:^7.4.4":
|
||||
version: 7.28.2
|
||||
resolution: "@babel/types@npm:7.28.2"
|
||||
@@ -4365,6 +4477,16 @@ __metadata:
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@babel/types@npm:^7.29.7":
|
||||
version: 7.29.7
|
||||
resolution: "@babel/types@npm:7.29.7"
|
||||
dependencies:
|
||||
"@babel/helper-string-parser": "npm:^7.29.7"
|
||||
"@babel/helper-validator-identifier": "npm:^7.29.7"
|
||||
checksum: 10c0/b6623994c69717fa27294f5fa46d59140338e2d86c6c1c13085c84ef7d53086ee357fbf4fe9abe3dd3da75734dc77c4c0df2f90fb29e667558bb3b3fb705e88f
|
||||
languageName: node
|
||||
linkType: hard
|
||||
|
||||
"@base-ui/react@npm:^1.3.0":
|
||||
version: 1.3.0
|
||||
resolution: "@base-ui/react@npm:1.3.0"
|
||||
|
||||
Reference in New Issue
Block a user