[Snyk] Upgrade @babel/traverse from 7.1.4 to 7.28.6 by Mhmonicox · Pull Request #296 · Mhmonicox/node

Mhmonicox · 2026-02-10T11:26:42Z

Snyk has created this PR to upgrade @babel/traverse from 7.1.4 to 7.28.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 149 versions ahead of your current version.
The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	786	Proof of Concept
Code Injection SNYK-JS-LODASH-1040724	786	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-450202	786	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	786	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	786	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-6139239	786	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	786	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-15053838	786	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:debug:20170905	786	Proof of Concept

Release notes

Package name: @babel/traverse

7.28.6 - 2026-01-12
v7.28.6 (2026-01-12)

Thanks @ kadhirash and @ kolvian for your first PRs!

🐛 Bug Fix
- babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
  - #17589 Improve Unicode handling in code-frame tokenizer (@ JLHwung)
- babel-plugin-transform-regenerator
  - #17556 fix: transform-regenerator correctly handles scope (@ liuxingbaoyu)
- babel-plugin-transform-react-jsx
  - #17538 fix: Keep jsx comments (@ liuxingbaoyu)
💅 Polish
- babel-core, babel-standalone
  - #17606 Polish(standalone): improve message on invalid preset/plugin (@ JLHwung)
🏠 Internal
- babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex
  - #17580 Allow Babel 8 in compatible Babel 7 plugins (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-plugin-transform-react-jsx
  - #17555 perf: Use lighter traversal for jsx __source,__self (@ liuxingbaoyu)
Committers: 7
- Babel Bot (@ babel-bot)
- Eliot Pontarelli (@ kolvian)
- Huáng Jùnliàng (@ JLHwung)
- Kadhirash Sivakumar (@ kadhirash)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
7.28.5 - 2025-10-23
v7.28.5 (2025-10-23)

Thank you @ CO0Ki3, @ Olexandr88, and @ youthfulhps for your first PRs!

👓 Spec Compliance
- babel-parser
  - #17446 Allow Runtime Errors for Function Call Assignment Targets (@ liuxingbaoyu)
- babel-helper-validator-identifier
  - #17501 fix: update identifier to unicode 17 (@ fisker)
🐛 Bug Fix
- babel-plugin-proposal-destructuring-private
  - #17534 Allow mixing private destructuring and rest (@ CO0Ki3)
- babel-parser
  - #17521 Improve @ babel/parser error typing (@ JLHwung)
  - #17491 fix: improve ts-only declaration parsing (@ JLHwung)
- babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  - #17519 fix: rest correctly returns plain array (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  - #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@ JLHwung)
- babel-traverse
  - #17504 fix: ensure scope.push register in anonymous fn (@ JLHwung)
🏠 Internal
- babel-types
  - #17494 Type checking babel-types scripts (@ JLHwung)
🏃‍♀️ Performance
- babel-core
  - #17490 Faster finding of locations in buildCodeFrameError (@ liuxingbaoyu)
Committers: 8
- Babel Bot (@ babel-bot)
- Byeongho Yoo (@ youthfulhps)
- Huáng Jùnliàng (@ JLHwung)
- Hyeon Dokko (@ CO0Ki3)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ Olexandr88
- @ liuxingbaoyu
- fisker Cheung (@ fisker)
7.28.4 - 2025-09-05
v7.28.4 (2025-09-05)

Thanks @ gwillen and @ mrginglymus for your first PRs!

🏠 Internal
- babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  - #17493 Update Jest to v30.1.1 (@ JLHwung)
- babel-plugin-transform-regenerator
  - #17455 chore: Clean up transform-regenerator (@ liuxingbaoyu)
- babel-core
  - #17474 Switch to @ jridgewell/remapping (@ mrginglymus)
Committers: 5
- Babel Bot (@ babel-bot)
- Bill Collins (@ mrginglymus)
- Glenn Willen (@ gwillen)
- Huáng Jùnliàng (@ JLHwung)
- @ liuxingbaoyu
7.28.3 - 2025-08-14
v7.28.3 (2025-08-14)

👓 Spec Compliance
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
  - #17443 [static blocks] Do not inject new static fields after static code (@ nicolo-ribaudo)
🐛 Bug Fix
- babel-parser
  - #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@ easrng)
  - #17478 fix(parser): stop subscript parsing on async arrow (@ JLHwung)
💅 Polish
- babel-plugin-transform-regenerator, babel-plugin-transform-runtime
  - #17363 Do not save last yield in call in temp var (@ nicolo-ribaudo)
📝 Documentation
- #17448 move eslint-{parser,plugin} docs to the website (@ JLHwung)
🏠 Internal
- #17454 Enable type checking for scripts and babel-worker.cjs (@ JLHwung)
🔬 Output optimization
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
  - #17444 Optimize do expression output (@ JLHwung)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Jam Balaya (@ JamBalaya56562)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- easrng (@ easrng)
7.28.0 - 2025-07-02
7.27.7 - 2025-06-26
7.27.4 - 2025-05-30
7.27.3 - 2025-05-27
7.27.1 - 2025-04-30
7.27.0 - 2025-03-24
7.26.10 - 2025-03-11
7.26.9 - 2025-02-14
7.26.8 - 2025-02-08
7.26.7 - 2025-01-24
7.26.5 - 2025-01-10
7.26.4 - 2024-12-05
7.26.3 - 2024-12-04
7.25.9 - 2024-10-22
7.25.7 - 2024-10-02
7.25.6 - 2024-08-29
7.25.4 - 2024-08-22
7.25.3 - 2024-07-31
7.25.2 - 2024-07-30
7.25.1 - 2024-07-28
7.25.0 - 2024-07-26
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.4 - 2023-11-20
7.23.3 - 2023-11-09
7.23.2 - 2023-10-11
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.4 - 2023-05-29
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.2 - 2023-02-23
7.21.0 - 2023-02-20
7.20.13 - 2023-01-21
7.20.12 - 2023-01-04
7.20.10 - 2022-12-23
7.20.8 - 2022-12-22
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.1 - 2022-11-01
7.20.0 - 2022-10-27
7.19.6 - 2022-10-20
7.19.4 - 2022-10-10
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.11 - 2022-08-04
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.8 - 2022-07-08
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.3 - 2022-02-15
7.17.0 - 2022-02-02
7.16.10 - 2022-01-19
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.3 - 2021-11-09
7.16.0 - 2021-10-29
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.9 - 2021-08-01
7.14.8 - 2021-07-20
7.14.7 - 2021-06-21
7.14.5 - 2021-06-09
7.14.2 - 2021-05-12
7.14.0 - 2021-04-29
7.13.17 - 2021-04-20
7.13.15 - 2021-04-08
7.13.13 - 2021-03-26
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.13 - 2021-02-03
7.12.12 - 2020-12-23
7.12.10 - 2020-12-09
7.12.9 - 2020-11-24
7.12.8 - 2020-11-23
7.12.7 - 2020-11-20
7.12.5 - 2020-11-03
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.0 - 2020-03-20
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.4 - 2019-11-22
7.7.2 - 2019-11-06
7.7.0 - 2019-11-05
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.0 - 2019-07-04
7.4.5 - 2019-05-21
7.4.4 - 2019-04-26
7.4.3 - 2019-04-02
7.4.0 - 2019-03-19
7.3.4 - 2019-02-25
7.2.3 - 2018-12-20
7.2.2 - 2018-12-15
7.1.6 - 2018-11-13
7.1.5 - 2018-11-06
7.1.4 - 2018-10-11

from @babel/traverse GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @babel/traverse from 7.1.4 to 7.28.6. See this package in npm: @babel/traverse See this project in Snyk: https://app.snyk.io/org/mhmoni25/project/e808c156-f28b-4528-af5a-555f97e84530?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @babel/traverse from 7.1.4 to 7.28.6#296

[Snyk] Upgrade @babel/traverse from 7.1.4 to 7.28.6#296
Mhmonicox wants to merge 1 commit intomasterfrom
snyk-upgrade-50fbb98f5f9d4ca079462d446f6bc0fe

Mhmonicox commented Feb 10, 2026

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 7

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.4 (2025-09-05)

🏠 Internal

Committers: 5

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 5

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

Mhmonicox commented Feb 10, 2026

Snyk has created this PR to upgrade @babel/traverse from 7.1.4 to 7.28.6.

Issues fixed by the recommended upgrade:

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 7

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.4 (2025-09-05)

🏠 Internal

Committers: 5

v7.28.3 (2025-08-14)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 5

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants