[Snyk] Upgrade @babel/preset-env from 7.8.2 to 7.28.3

[bee22193]

Snyk has created this PR to upgrade @babel/preset-env from 7.8.2 to 7.28.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 109 versions ahead of your current version.

• The recommended version was released 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	572	Proof of Concept
	Code Injection SNYK-JS-LODASH-1040724	572	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	572	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-608086	572	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-6139239	572	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	572	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	572	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	572	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	572	Proof of Concept

Release notes

Package name: @babel/preset-env

• 7.28.3 - 2025-08-14
  

  v7.28.3 (2025-08-14)

  👓 Spec Compliance

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
    • #17443 [static blocks] Do not inject new static fields after static code (@ nicolo-ribaudo)

  🐛 Bug Fix

  • babel-parser
    • #17465 fix(parser/typescript): parse import("./a", {with:{},}) (@ easrng)
    • #17478 fix(parser): stop subscript parsing on async arrow (@ JLHwung)

  💅 Polish

  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime
    • #17363 Do not save last yield in call in temp var (@ nicolo-ribaudo)

  📝 Documentation

  • #17448 move eslint-{parser,plugin} docs to the website (@ JLHwung)

  🏠 Internal

  • #17454 Enable type checking for scripts and babel-worker.cjs (@ JLHwung)

  🔬 Output optimization

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions
    • #17444 Optimize do expression output (@ JLHwung)

  Committers: 5

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Jam Balaya (@ JamBalaya56562)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • easrng (@ easrng)
• 7.28.0 - 2025-07-02
  

  v7.28.0 (2025-07-02)

  🚀 New Feature

  • babel-node
    • #17147 Support top level await in node repl (@ liuxingbaoyu)
  • babel-types
    • #17258 feat(matchesPattern): support super/private/meta (@ JLHwung)
  • babel-compat-data, babel-preset-env
    • #17355 Add explicit resource management to preset-env (@ JLHwung)
  • babel-core, babel-parser
    • #17390 Support sourceType: "commonjs" (@ JLHwung)
  • babel-generator, babel-parser
    • #17346 Materialize explicitResourceManagement parser plugin (@ JLHwung)
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
    • #17391 LVal coverage updates (Part 2) (@ JLHwung)
  • babel-parser, babel-traverse, babel-types
    • #17378 Accept bigints in t.bigIntLiteral factory (@ JLHwung)
  • babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
    • #17277 Transform discard binding (@ JLHwung)
  • babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
    • #17163 Parse discard binding (@ JLHwung)

  🐛 Bug Fix

  • babel-helper-globals, babel-plugin-transform-classes, babel-traverse
    • #17297 Create babel-helper-globals (@ JLHwung)
  • babel-types
    • #17009 feature: TSTypeOperator: keyof (#16799) (@ coderaiser)

  🏠 Internal

  • babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
    • #17403 Update babel-polyfill packages (@ nicolo-ribaudo)

  Committers: 5

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • @ liuxingbaoyu
  • coderaiser (@ coderaiser)
• 7.27.2 - 2025-05-06
• 7.27.1 - 2025-04-30
• 7.26.9 - 2025-02-14
• 7.26.8 - 2025-02-08
• 7.26.7 - 2025-01-24
• 7.26.0 - 2024-10-25
• 7.25.9 - 2024-10-22
• 7.25.8 - 2024-10-10
• 7.25.7 - 2024-10-02
• 7.25.4 - 2024-08-22
• 7.25.3 - 2024-07-31
• 7.25.2 - 2024-07-30
• 7.25.0 - 2024-07-26
• 7.24.8 - 2024-07-11
• 7.24.7 - 2024-06-05
• 7.24.6 - 2024-05-24
• 7.24.5 - 2024-04-29
• 7.24.4 - 2024-04-03
• 7.24.3 - 2024-03-20
• 7.24.1 - 2024-03-19
• 7.24.0 - 2024-02-28
• 7.23.9 - 2024-01-25
• 7.23.8 - 2024-01-08
• 7.23.7 - 2023-12-29
• 7.23.6 - 2023-12-11
• 7.23.5 - 2023-11-29
• 7.23.3 - 2023-11-09
• 7.23.2 - 2023-10-11
• 7.22.20 - 2023-09-16
• 7.22.15 - 2023-09-04
• 7.22.14 - 2023-08-30
• 7.22.10 - 2023-08-07
• 7.22.9 - 2023-07-12
• 7.22.7 - 2023-07-06
• 7.22.6 - 2023-07-04
• 7.22.5 - 2023-06-08
• 7.22.4 - 2023-05-29
• 7.22.2 - 2023-05-26
• 7.22.1 - 2023-05-26
• 7.22.0 - 2023-05-26
• 7.21.5 - 2023-04-28
• 7.21.4 - 2023-03-31
• 7.21.4-esm.4 - 2023-04-04
• 7.21.4-esm.3 - 2023-04-04
• 7.21.4-esm.2 - 2023-04-04
• 7.21.4-esm.1 - 2023-04-04
• 7.21.4-esm - 2023-04-04
• 7.20.2 - 2022-11-04
• 7.19.4 - 2022-10-10
• 7.19.3 - 2022-09-27
• 7.19.1 - 2022-09-14
• 7.19.0 - 2022-09-05
• 7.18.10 - 2022-08-01
• 7.18.9 - 2022-07-18
• 7.18.6 - 2022-06-27
• 7.18.2 - 2022-05-25
• 7.18.0 - 2022-05-19
• 7.17.12 - 2022-05-16
• 7.17.10 - 2022-04-29
• 7.16.11 - 2022-01-20
• 7.16.10 - 2022-01-19
• 7.16.8 - 2022-01-10
• 7.16.7 - 2021-12-31
• 7.16.5 - 2021-12-13
• 7.16.4 - 2021-11-16
• 7.16.0 - 2021-10-29
• 7.15.8 - 2021-10-06
• 7.15.6 - 2021-09-09
• 7.15.4 - 2021-09-02
• 7.15.0 - 2021-08-04
• 7.14.9 - 2021-08-01
• 7.14.8 - 2021-07-20
• 7.14.7 - 2021-06-21
• 7.14.5 - 2021-06-09
• 7.14.4 - 2021-05-28
• 7.14.2 - 2021-05-12
• 7.14.1 - 2021-05-04
• 7.14.0 - 2021-04-29
• 7.13.15 - 2021-04-08
• 7.13.12 - 2021-03-22
• 7.13.10 - 2021-03-08
• 7.13.9 - 2021-03-01
• 7.13.8 - 2021-02-26
• 7.13.5 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.16 - 2021-02-11
• 7.12.13 - 2021-02-03
• 7.12.11 - 2020-12-15
• 7.12.10 - 2020-12-09
• 7.12.7 - 2020-11-20
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.5 - 2020-08-31
• 7.11.0 - 2020-07-30
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.2 - 2020-05-30
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.5 - 2020-04-07
• 7.9.0 - 2020-03-20
• 7.8.7 - 2020-03-05
• 7.8.6 - 2020-02-27
• 7.8.4 - 2020-01-30
• 7.8.3 - 2020-01-13
• 7.8.2 - 2020-01-12

from @babel/preset-env GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs