chore(deps-dev): bump @babel/parser from 7.29.7 to 8.0.4#991
chore(deps-dev): bump @babel/parser from 7.29.7 to 8.0.4#991dependabot[bot] wants to merge 3 commits into
Conversation
Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.7 to 8.0.4. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.4/packages/babel-parser) --- updated-dependencies: - dependency-name: "@babel/parser" dependency-version: 8.0.4 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
📝 WalkthroughWalkthroughUpdates the ChangesBabel parser dependency
Estimated code review effort: 1 (Trivial) | ~2 minutes Suggested reviewers: 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
CI triageCI failed on this PR. Automated classification of the 3 failed job(s):
Compared with main CI run #4054 (success). Classification is evidence routing, not permission to ignore a failure. Exact quarantined Playwright identities remain governed by the flake ledger. |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@package.json`:
- Line 206: Update the package.json engine configuration to require Node 24.11.0
or newer, aligning the repository runtime floor with `@babel/parser` 8.0.4;
alternatively, downgrade `@babel/parser` to a compatible 7.x release while
preserving supported Node versions.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro Plus
Run ID: 7a6f4c68-8b42-4f45-8910-477b92479c22
⛔ Files ignored due to path filters (1)
package-lock.jsonis excluded by!**/package-lock.json
📒 Files selected for processing (1)
package.json
| "devDependencies": { | ||
| "@axe-core/playwright": "^4.12.1", | ||
| "@babel/parser": "^7.29.7", | ||
| "@babel/parser": "^8.0.4", |
There was a problem hiding this comment.
🩺 Stability & Availability | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
rg -n '"node"|24\.' package.json package-lock.json .nvmrc .node-version .tool-versions Dockerfile .github 2>/dev/null || trueRepository: BigSimmo/Database
Length of output: 30638
Bump the Node floor to 24.11.0+
@babel/parser 8.0.4 requires ^22.18.0 || >=24.11.0, so the current 24.x engine range can break installs on Node 24.0–24.10 under engine-strict. Keep parser 7.x or raise the repo/runtime floor.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@package.json` at line 206, Update the package.json engine configuration to
require Node 24.11.0 or newer, aligning the repository runtime floor with
`@babel/parser` 8.0.4; alternatively, downgrade `@babel/parser` to a compatible 7.x
release while preserving supported Node versions.
Source: Coding guidelines
…se-js floor Resolves two open Dependabot dependency PRs. @babel/parser ^7.29.7 → ^8.0.4 (dev, PR #991) - Babel 8 models dynamic `import(...)` as an ESTree-aligned ImportExpression (specifier in `source`, attributes in `options`) instead of a CallExpression whose callee is an `Import` node. Teach the architecture-boundaries import graph both shapes so dynamic-import edges keep resolving. - Babel 8 parses import attributes by default and removed the standalone "importAttributes" parser plugin (now a type error). Drop it from the two test parsers; attribute parsing behaviour is unchanged. @supabase/supabase-js ^2.108.2 → ^2.110.7 (prod, supersedes PR #945) - 2.110.7 is already the resolved/installed version under the old floor; this only lifts the declared floor to match reality. The client-bundle secret scanner already masks matches and already ignores supabase-js's bare `sb_secret_` prefix literal (its regex requires a 20+ char token), so the stale scanner rewrite in PR #945 is intentionally not taken — it would regress the newer masking on main. Lockfile is regenerated with the repo-pinned npm@11.17.0 (packageManager) so platform-optional entries (@emnapi/core, @emnapi/runtime) are preserved; an older npm prunes them and breaks `npm ci` in CI. Verification (offline): typecheck, full unit suite (no new failures vs the pre-existing pdf-extraction-budget sandbox flake), lint, knip, production build + client-bundle-secrets scan, and `npm@11.17.0 ci --dry-run` all green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TVVgc9PtHfj1aUQX387P8y
|
Superseded by #1014, which has merged ·@·d·ependabot c·lose Generated by Claude Code |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps @babel/parser from 7.29.7 to 8.0.4.
Release notes
Sourced from @babel/parser's releases.
... (truncated)
Changelog
Sourced from @babel/parser's changelog.
... (truncated)
Commits
8ed5db1v8.0.41cd94d4fix(parser): disallowdeclare module M {}(#18120)6b66b17fix(parser): forbid let x! and let x! = (#18100)7dc825av8.0.005eb4beRemovelocations: "packed"(#18034)827d003Change jestsnapshotFormat(#18029)73bceefv8.0.0-rc.6c6d71f3EnablestrictFunctionTypes(#17946)0b91d35Add file URL support for test runners (#18002)dc91f90v8.0.0-rc.5Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit