@babel/runtime-corejs2 7.26.10

on Node.js NPM

v7.26.10 (2025-03-11)

Thanks @jordan-choi and @mmmsssttt404 for your first PRs!

This release includes a fix for GHSA-968p-4wvh-cqc8, a security vulnerability which affects the .replace method of transpiled regular expressions that use named capturing groups.

👓 Spec Compliance

• babel-parser
  • #17159 Disallow decorator in array pattern (@JLHwung)

🐛 Bug Fix

• babel-parser, babel-template
  • #17164 Fix: always initialize ExportDeclaration attributes (@JLHwung)
• babel-core
  • #17142 fix: "Map maximum size exceeded" in deepClone (@liuxingbaoyu)
• babel-parser, babel-plugin-transform-typescript
  • #17154 Update typescript parser tests (@JLHwung)
• babel-traverse
  • #17151 fix: Should not evaluate vars in child scope (@liuxingbaoyu)
• babel-generator
  • #17153 fix: Correctly generate abstract override (@liuxingbaoyu)
• babel-parser
  • #17107 Fix source type detection when parsing TypeScript (@JLHwung)
• babel-helpers, babel-runtime, babel-runtime-corejs2, babel-runtime-corejs3
  • #17173 Fix processing of replacement pattern with named capture groups (@mmmsssttt404)

💅 Polish

• babel-standalone
  • #17158 Avoid warnings when re-bundling @babel/standalone with webpack (@liuxingbaoyu)

🏠 Internal

• babel-parser
  • #17160 Left-value parsing cleanup (@JLHwung)

Committers: 6

• Babel Bot (@babel-bot)
• Huáng Jùnliàng (@JLHwung)
• Nicolò Ribaudo (@nicolo-ribaudo)
• Yunyoung Jordan Choi (@jordan-choi)
• @liuxingbaoyu
• @mmmsssttt404