Skip to content

chore(deps): bump @babel/core override to 7.29.6#2735

Merged
ConnorQi01 merged 3 commits into
masterfrom
dev/v-peq/security_babelCore_7.29.6
Jun 23, 2026
Merged

chore(deps): bump @babel/core override to 7.29.6#2735
ConnorQi01 merged 3 commits into
masterfrom
dev/v-peq/security_babelCore_7.29.6

Conversation

@ConnorQi01

Copy link
Copy Markdown
Collaborator

Summary

Adds @babel/core to the overrides section in package.json to force version 7.29.6, addressing CVE-2026-49356 (arbitrary file read via sourceMappingURL, low severity).

  • Previous transitive version: 7.14.2
  • Fixed version: 7.29.6 (same major, backward compatible)

Test Plan

  • Verify @babel/core resolves to 7.29.6 in package-lock.json
  • Extension builds without errors

Closes #2734

@ConnorQi01 ConnorQi01 changed the title security: bump @babel/core override to 7.29.6 Fix security vulnerability: bump @babel/core override to 7.29.6 Jun 22, 2026
@ConnorQi01 ConnorQi01 changed the title Fix security vulnerability: bump @babel/core override to 7.29.6 chore(deps): bump @babel/core override to 7.29.6 Jun 22, 2026
@ConnorQi01

Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

@ConnorQi01

Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

EmmaYuan1015
EmmaYuan1015 previously approved these changes Jun 22, 2026
@ConnorQi01

Copy link
Copy Markdown
Collaborator Author

/azp run

@ConnorQi01 ConnorQi01 requested a review from EmmaYuan1015 June 23, 2026 03:08
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines successfully started running 1 pipeline(s).

@ConnorQi01 ConnorQi01 merged commit 2960ade into master Jun 23, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix security vulnerability: bump @babel/core transitive dependency to 7.29.6

2 participants