Bump @babel/core from 7.21.4 to 7.29.7

[dependabot]

Bumps @babel/core from 7.21.4 to 7.29.7.

Release notes

Sourced from @​babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

• babel-generator
  • #18014 Catchup source map position in preserveFormat (@​nicolo-ribaudo)
• babel-core
  • #18001 [7.x packport]Improve input source map handling (@​JLHwung)
• babel-core, babel-generator
  • #17998 Preserve original identifier names from input sourcemaps (#17992) (@​Andarist)

Committers: 3

• Huáng Jùnliàng (@​JLHwung)
• Mateusz Burzyński (@​Andarist)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

• babel-preset-env
  • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

• babel-plugin-transform-modules-systemjs
  • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

• Huáng Jùnliàng (@​JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

• babel-parser
  • #17923 Support flow extends bound (@​JLHwung)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
• babel-register
  • #17915 Fix thread synchronization issues in @babel/register (@​liuxingbaoyu)
• babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env
  • #17788 Add bugfix plugin for Safari array rest destructuring bug (@​JLHwung)

💅 Polish

• babel-parser

... (truncated)

Commits

• 4fba754 v7.29.7
• 04ea6b2 v7.29.6
• 99f498a [7.x packport]Improve input source map handling (#18001)
• feba0a3 Preserve original identifier names from input sourcemaps (#17992) (#17998)
• aa8394e v7.29.0
• ad0d03f [7.x backport] feat: Allow specifying startLine in code frame (#17739)
• d7f4008 v7.28.6
• e130225 Polish(standalone): improve message on invalid preset/plugin (#17606)
• 99dcba5 chore: enable some ts-eslint rules (#17592)
• c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​babel/core since your current version.

[rugpanov]

Status: cannot merge yet — blocked by the internal package mirror (not a code issue).

CI fails at yarn install --immutable because this bump pulls in newer transitive dependencies that aren't yet available on the Databricks JFrog artifactory mirror:

YN0035: caniuse-lite@npm:1.0.30001800: Response Code: 403 (Forbidden)
  https://databricks.jfrog.io/artifactory/api/npm/db-npm/caniuse-lite/-/caniuse-lite-1.0.30001800.tgz
YN0035: electron-to-chromium@npm:1.5.384: Response Code: 403 (Forbidden)

These come in via @babel/core 7.29's dependency tree. The bump itself is a safe minor upgrade — the blocker is purely mirror availability.

When we can merge: once caniuse-lite@1.0.30001800 and electron-to-chromium@1.5.384 (and any other 403'd transitive deps) are mirrored into db-npm, yarn install --immutable will pass and this can go green + merge. Until then it's blocked. Leaving open so it unblocks automatically once the mirror catches up.

[github-actions]

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/vscode

Inputs:

• PR number: 1950
• Commit SHA: 99cca5c8a1bc4148c90e4a46d3fb57ae8a364bc9

Checks will be approved automatically on success.

[rugpanov]

Closing. Root cause turned out not to be a mirror lag but phantom versions in this PR's lockfile: the transitive deps it pinned don't exist on public npm at all —

• caniuse-lite@1.0.30001800 → npm latest is 1.0.30001799
• electron-to-chromium@1.5.384 → npm returns E404 (latest is 1.5.378)

So there's nothing to mirror into JFrog (hence the 403s), and the lockfile can't resolve. @babel/core here is only a transitive dev-dependency (via istanbul-lib-instrument), not a direct or security-flagged one.

Closing so Dependabot re-raises with a freshly resolved lockfile against real versions. No code change needed.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.