Skip to content

chore(deps): bump @babel/parser from 7.29.7 to 8.0.4 - #430

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/babel/parser-8.0.4
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/babel/parser-8.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @babel/parser from 7.29.7 to 8.0.4.

Release notes

Sourced from @​babel/parser's releases.

v8.0.4 (2026-07-09)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-typescript
  • babel-generator, babel-parser, babel-plugin-transform-typescript

🐛 Bug Fix

🏠 Internal

  • babel-helper-validator-identifier

Committers: 4

v8.0.3 (2026-06-27)

🐛 Bug Fix

  • babel-core, babel-plugin-syntax-typescript
  • babel-standalone

Committers: 2

v8.0.2 (2026-06-18)

🐛 Bug Fix

  • Other
  • babel-helper-validator-identifier

🏠 Internal

  • babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

Committers: 2

... (truncated)

Changelog

Sourced from @​babel/parser's changelog.

v8.0.4 (2026-07-09)

👓 Spec Compliance

  • babel-parser, babel-plugin-transform-typescript
  • babel-generator, babel-parser, babel-plugin-transform-typescript

🐛 Bug Fix

🏠 Internal

  • babel-helper-validator-identifier

v8.0.3 (2026-06-27)

🐛 Bug Fix

  • babel-core, babel-plugin-syntax-typescript
  • babel-standalone

v8.0.2 (2026-06-18)

🐛 Bug Fix

  • Other
  • babel-helper-validator-identifier

🏠 Internal

  • babel-plugin-proposal-decorators, babel-plugin-transform-regenerator, babel-preset-env

v8.0.1 (2026-06-17)

💥 Breaking Change

  • babel-core, babel-plugin-transform-object-rest-spread, babel-plugin-transform-runtime, babel-preset-env, babel-standalone

v8.0.0 (2026-06-16)

👓 Spec Compliance

💥 Breaking Change

  • babel-cli, babel-node, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-modules-commonjs, babel-plugin-transform-object-rest-spread, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-regenerator, babel-preset-env, babel-register
  • babel-plugin-transform-runtime, babel-runtime-corejs3, babel-runtime
  • babel-parser

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026
@socket-security

socket-security Bot commented Jul 30, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​babel/​parser@​8.0.41001008094100

View full report

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/babel/parser-8.0.4 branch from adbaa89 to bbd7228 Compare July 31, 2026 01:11
Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.7 to 8.0.4.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.4/packages/babel-parser)

---
updated-dependencies:
- dependency-name: "@babel/parser"
  dependency-version: 8.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@allxsmith

Copy link
Copy Markdown
Owner

Closing — @babel/parser 8.x is not takeable for bestax-migrate, and the failure is broader than the typecheck error CI reports.

CI fails at src/runner.ts(40,5): error TS2322: Type '"deprecatedImportAssert"' is not assignable to type 'PluginConfig', which is only the first of three problems. Verified by parsing against the real @babel/parser@8.0.4 using the exact PARSER_OPTIONS from src/runner.ts:

  1. pipelineOperator: { proposal: 'minimal' } breaks every run. Babel 8 accepts only fsharp and hack, and validates the options object before reading a single character of source:

    "pipelineOperator" requires "proposal" option whose value must be one of: "fsharp", "hack".
    

    cli.ts:122-126 catches per file, so a run against any codebase — old or new — would print ✖ <file> for every js/jsx/ts/tsx file and migrate nothing. Only the Sass path (line-based, never touches Babel) would still work.

  2. deprecatedImportAssert is removed, taking import data from './data.json' assert { type: 'json' } with it (Missing semicolon). That is exactly what the "parses the legacy import-assert syntax" regression test guards.

  3. declare module M {} is rejected in 8.0.4 (fix(parser): disallow declare module M {} babel/babel#18120), which now requires a string name. Older TypeScript still uses the namespace form.

Separately, @babel/parser@8 declares engines: node ^22.18.0 || >=24.11.0, while this package declares >=22 and its guard at src/index.ts:15-21 only checks major < 22 — Node 22.0–22.17, all of 23.x, and 24.0–24.10 fall outside that range.

This was already a deliberate decision in #449 (v2.0.0, released after this PR was opened); the CHANGELOG records "@babel/parser deliberately stays on 7.x". jscodeshift 17 bundles its own Babel 7 regardless, so taking 8 would also put two parsers in the tree.

A codemod whose job is migrating older codebases must not crash on the syntax those codebases contain. #458 expands the rationale comment in runner.ts to name all three blockers and adds legacy-syntax regression tests.

@allxsmith allxsmith closed this Aug 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/babel/parser-8.0.4 branch August 2, 2026 16:46
allxsmith added a commit that referenced this pull request Aug 2, 2026
Dependabot reopens the 8.x bump weekly (#430), and it is not takeable: three
of the options in bestax-migrate's PARSER_OPTIONS are invalid under Babel 8,
and `pipelineOperator: { proposal: 'minimal' }` fails validation before any
source is read — so every js/jsx/ts/tsx file throws and the codemod migrates
nothing. Full analysis in #430 and #458.

Scoped to the major only; minor and patch updates still flow through the
production-dependencies group.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant