Bump Jest to 30.4.2 and pin @babel/core to 7.29.6#213
Conversation
|
@copilot i noticed babel/core didn't get updated in package-lock.json - i'd like it to be updated to 7.29.6, how can we make that happen? which npm package can we upgrade to make babel/core go up to 7.29.6? |
There isn’t a separate top-level package we can upgrade to land exactly on |
There was a problem hiding this comment.
Pull request overview
Updates the repo’s test toolchain dependencies to address a Dependabot security finding by bumping Jest and pinning a transitive Babel core version, with a corresponding lockfile refresh.
Changes:
- Bump
jestdevDependency from^30.0.3to^30.4.2. - Add an npm
overridespin for@babel/coreto7.29.6. - Regenerate
package-lock.jsonto reflect the updated dependency graph.
Show a summary per file
| File | Description |
|---|---|
| package.json | Updates Jest version and adds an npm override to pin @babel/core to 7.29.6. |
| package-lock.json | Refreshes the lockfile to resolve Jest 30.4.2 and Babel dependencies (including @babel/core@7.29.6). |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 1/2 changed files
- Comments generated: 1
| "globals": "^17.0.0", | ||
| "jest": "^30.4.2", | ||
| "markdownlint": "^0.41.0", |
There was a problem hiding this comment.
Updated engines.node to ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0 to match jest@30.4.2's requirement in tighten engines.node to match jest@30 minimum requirement.
Co-authored-by: Clay Miller <clay@smockle.com>
Should address this security finding: https://github.com/github/markdownlint-github/security/dependabot/47
🤞 - we want babel/core 7.29.6
Updates the repository’s Jest toolchain to 30.4.2, pins the transitive Babel core dependency to 7.29.6, and refreshes the npm lockfile to match the resolved dependency graph. This keeps the test runner version current without changing the package’s runtime surface.
Dependency update
jestdevDependency from^30.0.3to^30.4.2inpackage.json.Transitive dependency pin
overridesentry for@babel/coreat7.29.6so the Jest toolchain resolves the requested Babel core version consistently.Lockfile refresh
package-lock.jsonvianpm installso the checked-in lockfile matches the updated Jest version, the@babel/coreoverride, and their transitive resolutions.{ "devDependencies": { "jest": "^30.4.2" }, "overrides": { "@babel/core": "7.29.6" } }