Skip to content

chore(deps-dev): bump @babel/core from 7.16.0 to 7.29.6 - #942

Open
dependabot[bot] wants to merge 8 commits into
masterfrom
dependabot/npm_and_yarn/babel/core-7.29.6
Open

chore(deps-dev): bump @babel/core from 7.16.0 to 7.29.6#942
dependabot[bot] wants to merge 8 commits into
masterfrom
dependabot/npm_and_yarn/babel/core-7.29.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026

Copy link
Copy Markdown
Contributor

Bumps @babel/core from 7.16.0 to 7.29.6.

In testing this, it was discovered the PR #925 broke CI when moving rollup from 2.60.0 to 3.29.5. CI did not run yarn build, so nothing detected this. Downgrade to ^2.60.0 for now since moving forward is not possible without upgrading away from TypeScript 3.8.3, which is a much larger effort. Make a small change to rollup config to make it forward compatible with rollup 3 when we do eventually go there.

Additionally drop the unused top-level webpack devDependency (storybook pulls in its own webpack v4). Having the top-level webpack v5 also broke the build since tsconfig would include webpack v5's bundled types, which TypeScript 3.8.3 could not parse.

Update to cimg/node:24.20, which fixes the build issue the original dependabot commit for this PR introduced.

Run yarn build in CI so we can detect things like the rollup regression in CI (I've also made the CI build target required).

webpack v4 uses MD4 which is removed from openssl 3. Newer versions of node (after 14) use openssl 3, so pass NODE_OPTIONS=--openssl-legacy-provider to storybook (which calls webpack) until we can upgrade.

Run yarn build-storybook in CI.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 18, 2026
@dependabot
dependabot Bot requested review from a team and mavarius as code owners June 18, 2026 20:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 18, 2026
@jdstrand

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.16.0 to 7.29.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.6/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.29.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/babel/core-7.29.6 branch from 67fc5ee to c5944a7 Compare August 31, 2026 18:49
jdstrand and others added 4 commits August 31, 2026 14:31
rollup 3 loads rollup.config.js as an ES module. rollup 2 transpiled it
to CommonJS first. The config uses require(), so rollup 3 fails with
"require is not defined in ES module scope" and the build never starts.

rollup moved from 2.60.0 to 3.29.5 in #925 and nothing detected this,
because no CI step built the package.

Moving forward instead is not possible today. @wessberg/rollup-plugin-ts
1.1.73 does not support the rollup 3 plugin API, and its successor
rollup-plugin-ts 3.4.5 depends on browserslist-generator, which uses the
removed `assert { type: ... }` import syntax that Node 22 and Node 24
both reject. A forward fix requires upgrading TypeScript off 3.8.3.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Nothing in this repo imports webpack. The build is rollup, and Storybook
resolves its own nested webpack 4.46.0, which is the version Storybook
6.3 expects. The hoisted webpack 5.94.0 served nothing.

It also broke the build. tsconfig typeRoots includes every @types/*
package as a global type, which pulls in webpack 5's bundled types.d.ts.
TypeScript 3.8.3 cannot parse it and fails with "Property or signature
expected" at types.d.ts:1894. webpack 4 ships no types.d.ts, so removing
the direct dependency clears the error at its source.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
rollup.config.js mixed ES module imports with a CommonJS require. Read
the file with fs instead, so the config is valid ES module syntax.

No behaviour change under rollup 2. This stops the same failure
recurring if rollup 3 is attempted again.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@jdstrand
jdstrand force-pushed the dependabot/npm_and_yarn/babel/core-7.29.6 branch from 32c7de9 to 4a6aba7 Compare August 31, 2026 19:33
jdstrand and others added 3 commits August 31, 2026 14:41
CI ran yarn ci, which is test, lint and typecheck. It never ran the
rollup build, so nothing verified the artifact this package publishes.

The build was broken from 2024-09-24 until the earlier commits in this
branch. Two dependency bumps caused it and neither was detected, because
no CI step built the package.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
webpack v4 uses MD4 which is removed from openssl 3. node 24 uses
openssl 3, so pass NODE_OPTIONS=--openssl-legacy-provider to storybook
until we can upgrade.
@jdstrand
jdstrand requested a review from eatondustin1 August 31, 2026 20:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants