Repository navigation
build(deps-dev): Bump the babel group across 1 directory with 4 updates - #6013
dependabot[bot] wants to merge 1 commit into
Conversation
rtibblesbot
left a comment
There was a problem hiding this comment.
Grouped Dependabot bump of the babel toolchain, all devDependencies:
@babel/core^7.29.6→^8.0.1— major@babel/preset-env^7.29.5→^8.0.2— major@babel/plugin-transform-runtime^7.29.0→^8.0.1— major@babel/plugin-syntax-import-assertions^7.28.6→^7.29.7— minor- No security advisories in range.
- Lockfile diff confined to
@babel/*transitives, consistent with the manifest change.
Breaking changes hitting this repo directly (confirmed via CI, not changelog inference):
@babel/preset-env8.0.1 fully removes theuseBuiltInsoption ("Actually remove preset-env's useBuiltIns").- This repo's
babel.config.jsdelegates to the externalkolibri-buildconfig, which still passesuseBuiltIns. - Result: every webpack entry point fails in the "Build and deploy tests" job (
[BABEL] .../accounts/index.js: The 'useBuiltIns' option has been removed). - Babel 8's
loadPartialConfigis now async-only. babel-jeststill calls it synchronously, breaking every Jest suite (Starting from Babel 8.0.0, the 'loadPartialConfig' function expects a callback).
CI: failing — both the JS test suite and the production frontend build fail, directly caused by these Babel 8 breaking changes.
This major bump can't land standalone. kolibri-build's babel config and babel-jest both need Babel-8-compatible updates first. Recommend having Dependabot re-target these three packages to latest 7.x until upstream support lands.
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Ran a dependency-update review pipeline over the version bump:
- Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
- Extracted the changelog and release notes across the version range
- Assessed compatibility with this project's usage and whether any code changes are required
- Treated CI as the primary safety net
- Scaled the review depth to the update's risk
- Chose the verdict from semver risk, changelog findings, and CI status
b0ca7c7 to
35cc135
Compare
rtibblesbot
left a comment
There was a problem hiding this comment.
1 of 1 prior finding still open (see below).
[blocking] package.json:111 — Babel 8 major bump breaks the build
@babel/core ^7.29.6→^8.0.1, @babel/preset-env ^7.29.5→^8.0.2, and @babel/plugin-transform-runtime ^7.29.0→^8.0.1 are major bumps (devDependencies), alongside a minor bump of @babel/plugin-syntax-import-assertions (^7.28.6→^7.29.7).
Rebase only (9d1304a→35cc135, identical diff) — CI fails with the same two Babel 8 breaking changes as before:
useBuiltInsremoved from@babel/preset-env, butkolibri-build's sharedbabel.config.jsstill passes it → build fails on every webpack entry point.babel-jeststill callsloadPartialConfigsynchronously, unsupported since Babel 8.0.0 → Jest suite fails.
Neither kolibri-build nor babel-jest is touched by this PR, so it can't land standalone until both support Babel 8.
CI: failing.
Recommendation: Re-target the three packages to their latest 7.x releases until kolibri-build/babel-jest support Babel 8, or close this PR until then.
Prior-finding status
UNADDRESSED — package.json:111 — Babel 8 major bump breaks the build
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Ran a dependency-update review pipeline over the version bump:
- Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
- Extracted the changelog and release notes across the version range
- Assessed compatibility with this project's usage and whether any code changes are required
- Treated CI as the primary safety net
- Scaled the review depth to the update's risk
- Chose the verdict from semver risk, changelog findings, and CI status
35cc135 to
f3d97b3
Compare
🟢 Re-reviewingLast updated: 2026-11-02 06:34 UTC |
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #6013 — 0 of 1 prior findings resolved; 1 still open (see below). This push was a rebase onto unstable (35cc135→f3d97b3); the package.json/pnpm-lock.yaml diff is byte-identical to the previously reviewed one.
Bump: grouped devDependency update — @babel/core ^7.29.6→^8.0.1 (major), @babel/preset-env ^7.29.5→^8.0.2 (major), @babel/plugin-transform-runtime ^7.29.0→^8.0.1 (major), @babel/plugin-syntax-import-assertions ^7.28.6→^7.29.7 (minor). Lockfile churn is confined to @babel/* and its direct consumers (babel-jest, babel-loader, babel-core bridge) — no unexpected additions. No security fixes in range.
CI: failing (2 of 5 jobs), on two Babel 8 breaking changes:
useBuiltInsremoved from@babel/preset-env8 — every webpack entry point fails, because this repo'sbabel.config.jsdelegates tokolibri-build's shared config, which still passes the option:ERROR in ./accounts/index.js Error: [BABEL] .../frontend/accounts/index.js: The 'useBuiltIns' option has been removed. Please use babel-plugin-polyfill-corejs3 instead.loadPartialConfigis async-only in Babel 8 —babel-jeststill calls it synchronously, failing every Jest suite:Starting from Babel 8.0.0, the 'loadPartialConfig' function expects a callback. If you need to call it synchronously, please use 'loadPartialConfigSync'.
Neither kolibri-build nor babel-jest is touched by this PR, so the bump cannot land standalone.
Recommendation: re-target the three major bumps to their latest 7.x releases until kolibri-build and babel-jest support Babel 8, or close this PR until then. The @babel/plugin-syntax-import-assertions minor bump is harmless and could be split out if it's worth having on its own.
Prior-finding status
UNADDRESSED — package.json:111 — Babel 8 major bump breaks build and tests
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Ran a dependency-update review pipeline over the version bump:
- Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
- Extracted the changelog and release notes across the version range
- Assessed compatibility with this project's usage and whether any code changes are required
- Treated CI as the primary safety net
- Scaled the review depth to the update's risk
- Chose the verdict from semver risk, changelog findings, and CI status
f3d97b3 to
68ab728
Compare
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #6013: Babel 8 still breaks the webpack build and Jest tests. The prior finding is unaddressed.
Dev dependencies only:
@babel/core,@babel/preset-env,@babel/plugin-transform-runtime:^7.29.x→^8.0.6(major)@babel/plugin-syntax-import-assertions:^7.28.6→^7.29.7(minor)
CI failing: Javascript Tests, Build and deploy tests.
blocking: Babel 8 is incompatible with this repo's tooling:
@babel/preset-env8 removeduseBuiltIns.kolibri-build1.0.0 still passes it. Every webpack entry fails.babel-jest29 callsloadPartialConfigsynchronously. Babel 8 no longer allows that.
Please make both upgrades outside this PR, or close it:
- Upgrade
kolibri-buildto a release withoutuseBuiltIns; check 1.1.x. - Upgrade
babel-jestto 30; its peer range covers^8.0.0-0. - Or close this PR and ignore
@babel/*majors independabot.ymluntil then.
Prior-finding status
UNADDRESSED — package.json:111 — Babel 8 major bump breaks build and tests
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Ran a dependency-update review pipeline over the version bump:
- Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
- Extracted the changelog and release notes across the version range
- Assessed compatibility with this project's usage and whether any code changes are required
- Treated CI as the primary safety net
- Scaled the review depth to the update's risk
- Chose the verdict from semver risk, changelog findings, and CI status
|
@dependabot rebase |
68ab728 to
a46382f
Compare
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #6013 still breaks the frontend build and tests, because Babel 8 is incompatible with kolibri-build and babel-jest. 0 of 1 prior findings resolved.
@babel/core,@babel/preset-env,@babel/plugin-transform-runtime:^7.29.x→^8.0.6(major, dev).@babel/plugin-syntax-import-assertions:^7.28.6→^7.29.7(minor, dev).- Security fixes: none.
- CI failing: Frontend tests, Build frontend assets — same jobs as last round.
blocking: The rebase did not fix the Babel 8 breaks:
kolibri-build@1.0.0still passesuseBuiltIns. Babel 8 removed that option.babel-jest@29.7.0still loads Babel config synchronously. Babel 8 has no sync config loading.
Please hold the three Babel 8 packages at 7.x. Bump them once kolibri-build and babel-jest both release Babel 8 support.
Prior-finding status
UNADDRESSED — package.json:116 — Babel 8 major bump breaks build and tests
Written by rtibblesbot, an LLM-based coding agent.
|
@dependabot rebase |
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #6013: Babel 8 requires Node ≥22.18, but this repo pins Node 20. Please close this PR. 0 of 1 prior findings resolved after the rebase.
- Packages:
@babel/core,@babel/plugin-transform-runtime,@babel/preset-env7.29.x → 8.0.6;@babel/plugin-syntax-import-assertions7.28.6 → 7.29.7 - Semver: major (3), patch (1)
- Type: devDependencies
- CI: failing (Build frontend assets, Frontend tests)
- Security fixes: none
Breaking changes that affect this repo:
- Node
^22.18.0 || >=24.11.0required (#17969);engines, volta and CI pin Node 20. preset-envdropsuseBuiltIns(#18079).preset-envmodules: autonow assumes ESM (#18069).@babel/runtime-corejs3corejs exports removed (#18036).
Still open:
- blocking
package.json:116: Babel 8 needs Node ≥22.18; this repo pins Node 20. Raise Node inengines, volta, CI and Docker in a separate PR before taking Babel 8.
New:
- blocking
package.json:117:plugin-syntax-import-assertionsstays on 7.x beside three 8.x packages. The sharedkolibri-build/babel.configstill targets Babel 7. Migrate that config upstream first; this PR can't fix either.
Prior-finding status
UNADDRESSED — package.json:116 — Babel 8 requires Node ≥22.18; project pins Node 20
Written by rtibblesbot, an LLM-based coding agent.
Superseded by my review of a46382f: no blocking findings remain.
Bumps the babel group with 4 updates in the / directory: [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core), [@babel/plugin-syntax-import-assertions](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-syntax-import-assertions), [@babel/plugin-transform-runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-runtime) and [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env). Updates `@babel/core` from 7.29.6 to 8.0.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.9/packages/babel-core) Updates `@babel/plugin-syntax-import-assertions` from 7.28.6 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-syntax-import-assertions) Updates `@babel/plugin-transform-runtime` from 7.29.0 to 8.0.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.6/packages/babel-plugin-transform-runtime) Updates `@babel/preset-env` from 7.29.5 to 8.0.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-preset-env) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: babel - dependency-name: "@babel/plugin-syntax-import-assertions" dependency-version: 7.29.7 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: babel - dependency-name: "@babel/plugin-transform-runtime" dependency-version: 8.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: babel - dependency-name: "@babel/preset-env" dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: babel ... Signed-off-by: dependabot[bot] <support@github.com>
a46382f to
d0457f4
Compare
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #6013: Babel 8 still breaks Jest and the frontend build. 0 of 2 prior findings resolved. Recommend closing.
- Packages (devDependencies):
@babel/core7.29.6 → 8.0.9,@babel/preset-env7.29.5 → 8.0.7,@babel/plugin-transform-runtime7.29.0 → 8.0.6 (major);@babel/plugin-syntax-import-assertions7.28.6 → 7.29.7 (minor). - Security fixes: none in range.
- CI failing: Frontend tests, Build frontend assets.
blocking: Babel 8 does not work with this repo's Node version or tooling:
- Babel 8 requires Node
^22.18.0 || >=24.11.0(babel/babel#17969).package.json:188engines, volta and every workflow pin Node 20. - Jest:
babel-jest@29.7.0resolves against@babel/core@8.0.9and fails withStarting from Babel 8.0.0, the 'loadPartialConfig' function expects a callback. - Build:
preset-env8 removeduseBuiltIns(babel/babel#18079).kolibri-build@1.0.0still passes it.
Dependabot cannot make these changes. Close this PR, or ignore @babel/* majors in dependabot.yml, until Node, babel-jest and kolibri-build support Babel 8.
Prior-finding status
UNADDRESSED — package.json:116 — Babel 8 requires Node ≥22.18; project pins Node 20
UNADDRESSED — package.json:117 — plugin-syntax-import-assertions stays on 7.x beside 8.x; kolibri-build config targets Babel 7
Written by rtibblesbot, an LLM-based coding agent.
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #6013 breaks every frontend build and Jest run: Babel 8 removes the useBuiltIns option our shared config still sets.
- Packages:
@babel/core7.29.6 → 8.0.9,@babel/preset-env7.29.5 → 8.0.7,@babel/plugin-transform-runtime7.29.0 → 8.0.6,@babel/plugin-syntax-import-assertions7.28.6 → 7.29.7 - Semver risk: major (three packages); minor (
plugin-syntax-import-assertions) - Dependency type: development (build and test tooling)
- Security fixes: none
- CI: failing — "Build frontend assets" and "Frontend tests", both still failing after a re-run
Breaking changes this project hits:
preset-envdropsuseBuiltIns(v8.0.1);babel-plugin-polyfill-corejs3replaces it.babel.config.jsre-exportskolibri-build/babel.config, which still sets it. Every webpack entry and Jest run fails withThe 'useBuiltIns' option has been removed.- Two Babel cores load. The build log resolves
babel-loaderagainst@babel/core@7.29.7, whilepreset-env@8.0.7runs under@babel/core@8.0.9.babel-loader,babel-jestandbabel-core@7.0.0-bridge.0need peer ranges that accept 8.x. modules: autonow assumes ESM support.@babel/runtime-corejs3corejs exports are removed.
The upgrade needs a polyfill config migration, in kolibri-build or overridden here. It also needs every Babel package on one major. That work is tracked separately. Close this PR without merging.
Prior-finding status
None — no prior findings on this commit.
Written by rtibblesbot, an LLM-based coding agent.
|
Tracked in #6375. |
|
Quick check on rtibblesbot's review of this PR: react 👍 helpful · 😕 mixed · 👎 not helpful. Reply with anything specific. |
Bumps the babel group with 4 updates in the / directory: @babel/core, @babel/plugin-syntax-import-assertions, @babel/plugin-transform-runtime and @babel/preset-env.
Updates
@babel/corefrom 7.29.6 to 8.0.9Release notes
Sourced from @babel/core's releases.
... (truncated)
Changelog
Sourced from @babel/core's changelog.
... (truncated)
Commits
f9c9445v8.0.91fc0073v8.0.7d23b2fdfix(core): createConfigItem allows cb as 2nd arg (#18254)fd66590chore: upgrade verkit to v0.5.0 and obug to v3.0.0 (#18248)9e408d6v8.0.6753bedfRemove unused internal exports (#18235)e80c9acbuild: do not emit sourcemap in production build (#18231)8b01fecEnforce usage of Yarn catalog for reused dependencies (#18236)0d8ed70v8.0.54cea20dUse built-in glob in Node.js (#18097)Updates
@babel/plugin-syntax-import-assertionsfrom 7.28.6 to 7.29.7Release notes
Sourced from @babel/plugin-syntax-import-assertions's releases.
... (truncated)
Commits
4fba754v7.29.7Updates
@babel/plugin-transform-runtimefrom 7.29.0 to 8.0.6Release notes
Sourced from @babel/plugin-transform-runtime's releases.
... (truncated)
Changelog
Sourced from @babel/plugin-transform-runtime's changelog.
... (truncated)
Commits
9e408d6v8.0.68b01fecEnforce usage of Yarn catalog for reused dependencies (#18236)b4be199v8.0.1b68b1cbActually removepreset-env'suseBuiltIns(#18079)cd96c47chore(pkg): set@babel/corepeer deps to ^8.0.0 (#18076)7dc825av8.0.0ef2a7aaRemove corejs exports for@babe/runtime-corejs3(#18036)73bceefv8.0.0-rc.6dc91f90v8.0.0-rc.50e5a59dRequire Node.js^22.18.0 || >=24.11.0(#17969)Updates
@babel/preset-envfrom 7.29.5 to 8.0.7Release notes
Sourced from @babel/preset-env's releases.
... (truncated)
Changelog
Sourced from @babel/preset-env's changelog.
... (truncated)
Commits
1fc0073v8.0.72dd0e6eBump regexpu-core to 6.5.3 (#18295)fd66590chore: upgrade verkit to v0.5.0 and obug to v3.0.0 (#18248)9e408d6v8.0.6753bedfRemove unused internal exports (#18235)0d8ed70v8.0.54cea20dUse built-in glob in Node.js (#18097)1eac448refactor: replacesemverwithverkit(#18145)1554d58chore: Some minor cleanup (#18148)286c79aUpdate compat data sources (#18116)