Skip to content

chore(deps): bump @babel/core override to 7.29.6#2735

Open
ConnorQi01 wants to merge 2 commits into
masterfrom
dev/v-peq/security_babelCore_7.29.6
Open

chore(deps): bump @babel/core override to 7.29.6#2735
ConnorQi01 wants to merge 2 commits into
masterfrom
dev/v-peq/security_babelCore_7.29.6

Conversation

@ConnorQi01

Copy link
Copy Markdown
Collaborator

Summary

Adds @babel/core to the overrides section in package.json to force version 7.29.6, addressing CVE-2026-49356 (arbitrary file read via sourceMappingURL, low severity).

  • Previous transitive version: 7.14.2
  • Fixed version: 7.29.6 (same major, backward compatible)

Test Plan

  • Verify @babel/core resolves to 7.29.6 in package-lock.json
  • Extension builds without errors

Closes #2734

@ConnorQi01 ConnorQi01 changed the title security: bump @babel/core override to 7.29.6 Fix security vulnerability: bump @babel/core override to 7.29.6 Jun 22, 2026
@ConnorQi01 ConnorQi01 changed the title Fix security vulnerability: bump @babel/core override to 7.29.6 chore(deps): bump @babel/core override to 7.29.6 Jun 22, 2026
@ConnorQi01

Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

@ConnorQi01

Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix security vulnerability: bump @babel/core transitive dependency to 7.29.6

1 participant