chore(deps-dev): bump the babel group across 1 directory with 4 updates - #6013
chore(deps-dev): bump the babel group across 1 directory with 4 updates#6013dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
rtibblesbot
left a comment
rtibblesbot
left a comment
There was a problem hiding this comment.
Grouped Dependabot bump of the babel toolchain, all devDependencies:
@babel/core^7.29.6→^8.0.1— major@babel/preset-env^7.29.5→^8.0.2— major@babel/plugin-transform-runtime^7.29.0→^8.0.1— major@babel/plugin-syntax-import-assertions^7.28.6→^7.29.7— minor- No security advisories in range.
- Lockfile diff confined to
@babel/*transitives, consistent with the manifest change.
Breaking changes hitting this repo directly (confirmed via CI, not changelog inference):
@babel/preset-env8.0.1 fully removes theuseBuiltInsoption ("Actually remove preset-env's useBuiltIns").- This repo's
babel.config.jsdelegates to the externalkolibri-buildconfig, which still passesuseBuiltIns. - Result: every webpack entry point fails in the "Build and deploy tests" job (
[BABEL] .../accounts/index.js: The 'useBuiltIns' option has been removed). - Babel 8's
loadPartialConfigis now async-only. babel-jeststill calls it synchronously, breaking every Jest suite (Starting from Babel 8.0.0, the 'loadPartialConfig' function expects a callback).
CI: failing — both the JS test suite and the production frontend build fail, directly caused by these Babel 8 breaking changes.
This major bump can't land standalone. kolibri-build's babel config and babel-jest both need Babel-8-compatible updates first. Recommend having Dependabot re-target these three packages to latest 7.x until upstream support lands.
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Ran a dependency-update review pipeline over the version bump:
- Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
- Extracted the changelog and release notes across the version range
- Assessed compatibility with this project's usage and whether any code changes are required
- Treated CI as the primary safety net
- Scaled the review depth to the update's risk
- Chose the verdict from semver risk, changelog findings, and CI status
dependabot
Bot
changed the title
b0ca7c7 to
35cc135
Compare
rtibblesbot
left a comment
rtibblesbot
left a comment
There was a problem hiding this comment.
1 of 1 prior finding still open (see below).
[blocking] package.json:111 — Babel 8 major bump breaks the build
@babel/core ^7.29.6→^8.0.1, @babel/preset-env ^7.29.5→^8.0.2, and @babel/plugin-transform-runtime ^7.29.0→^8.0.1 are major bumps (devDependencies), alongside a minor bump of @babel/plugin-syntax-import-assertions (^7.28.6→^7.29.7).
Rebase only (9d1304a→35cc135, identical diff) — CI fails with the same two Babel 8 breaking changes as before:
useBuiltInsremoved from@babel/preset-env, butkolibri-build's sharedbabel.config.jsstill passes it → build fails on every webpack entry point.babel-jeststill callsloadPartialConfigsynchronously, unsupported since Babel 8.0.0 → Jest suite fails.
Neither kolibri-build nor babel-jest is touched by this PR, so it can't land standalone until both support Babel 8.
CI: failing.
Recommendation: Re-target the three packages to their latest 7.x releases until kolibri-build/babel-jest support Babel 8, or close this PR until then.
Prior-finding status
UNADDRESSED — package.json:111 — Babel 8 major bump breaks the build
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Ran a dependency-update review pipeline over the version bump:
- Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
- Extracted the changelog and release notes across the version range
- Assessed compatibility with this project's usage and whether any code changes are required
- Treated CI as the primary safety net
- Scaled the review depth to the update's risk
- Chose the verdict from semver risk, changelog findings, and CI status
Bumps the babel group with 4 updates in the / directory: [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core), [@babel/plugin-syntax-import-assertions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-assertions), [@babel/plugin-transform-runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-runtime) and [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env). Updates `@babel/core` from 7.29.6 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-core) Updates `@babel/plugin-syntax-import-assertions` from 7.28.6 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-syntax-import-assertions) Updates `@babel/plugin-transform-runtime` from 7.29.0 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-plugin-transform-runtime) Updates `@babel/preset-env` from 7.29.5 to 8.0.2 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.2/packages/babel-preset-env) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: babel - dependency-name: "@babel/plugin-syntax-import-assertions" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: babel - dependency-name: "@babel/plugin-transform-runtime" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: babel - dependency-name: "@babel/preset-env" dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: babel ... Signed-off-by: dependabot[bot] <support@github.com>
35cc135 to
f3d97b3
Compare
🔵 Review postedLast updated: 2026-08-01 00:11 UTC |
rtibblesbot
left a comment
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #6013 — 0 of 1 prior findings resolved; 1 still open (see below). This push was a rebase onto unstable (35cc135→f3d97b3); the package.json/pnpm-lock.yaml diff is byte-identical to the previously reviewed one.
Bump: grouped devDependency update — @babel/core ^7.29.6→^8.0.1 (major), @babel/preset-env ^7.29.5→^8.0.2 (major), @babel/plugin-transform-runtime ^7.29.0→^8.0.1 (major), @babel/plugin-syntax-import-assertions ^7.28.6→^7.29.7 (minor). Lockfile churn is confined to @babel/* and its direct consumers (babel-jest, babel-loader, babel-core bridge) — no unexpected additions. No security fixes in range.
CI: failing (2 of 5 jobs), on two Babel 8 breaking changes:
useBuiltInsremoved from@babel/preset-env8 — every webpack entry point fails, because this repo'sbabel.config.jsdelegates tokolibri-build's shared config, which still passes the option:ERROR in ./accounts/index.js Error: [BABEL] .../frontend/accounts/index.js: The 'useBuiltIns' option has been removed. Please use babel-plugin-polyfill-corejs3 instead.loadPartialConfigis async-only in Babel 8 —babel-jeststill calls it synchronously, failing every Jest suite:Starting from Babel 8.0.0, the 'loadPartialConfig' function expects a callback. If you need to call it synchronously, please use 'loadPartialConfigSync'.
Neither kolibri-build nor babel-jest is touched by this PR, so the bump cannot land standalone.
Recommendation: re-target the three major bumps to their latest 7.x releases until kolibri-build and babel-jest support Babel 8, or close this PR until then. The @babel/plugin-syntax-import-assertions minor bump is harmless and could be split out if it's worth having on its own.
Prior-finding status
UNADDRESSED — package.json:111 — Babel 8 major bump breaks build and tests
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Ran a dependency-update review pipeline over the version bump:
- Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
- Extracted the changelog and release notes across the version range
- Assessed compatibility with this project's usage and whether any code changes are required
- Treated CI as the primary safety net
- Scaled the review depth to the update's risk
- Chose the verdict from semver risk, changelog findings, and CI status
1 participant
Bumps the babel group with 4 updates in the / directory: @babel/core, @babel/plugin-syntax-import-assertions, @babel/plugin-transform-runtime and @babel/preset-env.
Updates
@babel/corefrom 7.29.6 to 8.0.1Release notes
Sourced from @babel/core's releases.
... (truncated)
Changelog
Sourced from @babel/core's changelog.
... (truncated)
Commits
b4be199v8.0.1b68b1cbActually removepreset-env'suseBuiltIns(#18079)de007eaAvoid trailing zeroes in Babel 9 generated version (#18078)7dc825av8.0.0b71c35aperf: Only extract source map comments at the end of the file (#18039)e74b70dchore: Remove unused file (#18033)ae57969chore: consolidate upwards traversal to empathic (#18030)827d003Change jestsnapshotFormat(#18029)34cf24eUpdate deps (#18023)73bceefv8.0.0-rc.6Updates
@babel/plugin-syntax-import-assertionsfrom 7.28.6 to 7.29.7Release notes
Sourced from @babel/plugin-syntax-import-assertions's releases.
... (truncated)
Commits
4fba754v7.29.7Updates
@babel/plugin-transform-runtimefrom 7.29.0 to 8.0.1Release notes
Sourced from @babel/plugin-transform-runtime's releases.
... (truncated)
Changelog
Sourced from @babel/plugin-transform-runtime's changelog.
... (truncated)
Commits
b4be199v8.0.1b68b1cbActually removepreset-env'suseBuiltIns(#18079)cd96c47chore(pkg): set@babel/corepeer deps to ^8.0.0 (#18076)7dc825av8.0.0ef2a7aaRemove corejs exports for@babe/runtime-corejs3(#18036)73bceefv8.0.0-rc.6dc91f90v8.0.0-rc.50e5a59dRequire Node.js^22.18.0 || >=24.11.0(#17969)2b5e8adUse yarn catalog (#17964)7300a66v8.0.0-rc.4Updates
@babel/preset-envfrom 7.29.5 to 8.0.2Release notes
Sourced from @babel/preset-env's releases.
... (truncated)
Changelog
Sourced from @babel/preset-env's changelog.
... (truncated)
Commits
73940a0v8.0.259a63a6Update@babel/preset-modulesand polyfill packages (#18081)b4be199v8.0.1b68b1cbActually removepreset-env'suseBuiltIns(#18079)cd96c47chore(pkg): set@babel/corepeer deps to ^8.0.0 (#18076)7dc825av8.0.0004f4b4Fallback to assuming ESM support withmodules: auto(#18069)73bceefv8.0.0-rc.6c6d71f3EnablestrictFunctionTypes(#17946)dc91f90v8.0.0-rc.5