build(deps-dev): bump @babel/core from 7.28.5 to 7.29.7

[dependabot]

Bumps @babel/core from 7.28.5 to 7.29.7.

Release notes

Sourced from @​babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

• babel-generator
  • #18014 Catchup source map position in preserveFormat (@​nicolo-ribaudo)
• babel-core
  • #18001 [7.x packport]Improve input source map handling (@​JLHwung)
• babel-core, babel-generator
  • #17998 Preserve original identifier names from input sourcemaps (#17992) (@​Andarist)

Committers: 3

• Huáng Jùnliàng (@​JLHwung)
• Mateusz Burzyński (@​Andarist)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

• babel-preset-env
  • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

• babel-plugin-transform-modules-systemjs
  • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

• Huáng Jùnliàng (@​JLHwung)

v7.29.3 (2026-04-30)

👓 Spec Compliance

• babel-parser
  • #17923 Support flow extends bound (@​JLHwung)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
• babel-register
  • #17915 Fix thread synchronization issues in @babel/register (@​liuxingbaoyu)
• babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env
  • #17788 Add bugfix plugin for Safari array rest destructuring bug (@​JLHwung)

💅 Polish

• babel-parser

... (truncated)

Commits

• 4fba754 v7.29.7
• 04ea6b2 v7.29.6
• 99f498a [7.x packport]Improve input source map handling (#18001)
• feba0a3 Preserve original identifier names from input sourcemaps (#17992) (#17998)
• aa8394e v7.29.0
• ad0d03f [7.x backport] feat: Allow specifying startLine in code frame (#17739)
• d7f4008 v7.28.6
• e130225 Polish(standalone): improve message on invalid preset/plugin (#17606)
• 99dcba5 chore: enable some ts-eslint rules (#17592)
• c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

🤖 Codex-Style Code Review by OpenCode (Vue Best Practice Enabled)

💡 Autonomous AI Reviewer inspecting git commit history and Vue code quality.

PR Review: build(deps-dev): bump @babel/core from 7.28.5 to 7.29.7

Summary

Automated Dependabot dependency bump for @babel/core (7.28.5 → 7.29.7). This is a dev-only dependency used by the build toolchain. The only changed file is package-lock.json (81 insertions, 65 deletionNow let me write the review report.
Review complete. Report written to review_report.md.

TL;DR: This is a routine Dependabot PR bumping @babel/core (7.28.5 → 7.29.7) — a dev-only build dependency. The only changed file is package-lock.json with no source code modifications. Verdict: ✅ Approve. No Vue-specific concerns, no security issues, no blocking items.
touched |

Dependency Graph Changes

The bump pulls in updated versions of the following @babel sub-packages:

Package	Old	New
@babel/core	7.28.5	7.29.7
@babel/code-frame	7.29.0	7.29.7
@babel/compat-data	7.28.5	7.29.7
@babel/generator	7.29.1	7.29.8
@babel/helper-compilation-targets	7.27.2	7.29.7
@babel/helper-globals	7.28.0	7.29.7
@babel/helper-module-imports	7.28.6	7.29.7
@babel/helper-module-transforms	7.28.6	7.29.7
@babel/helper-string-parser	7.27.1	7.29.7
@babel/helper-validator-identifier	7.28.5	7.29.7
@babel/helper-validator-option	7.27.1	7.29.7
@babel/helpers	7.28.4	7.29.7
@babel/parser	7.29.3	7.29.8
@babel/template	7.28.6	7.29.7
@babel/traverse	7.29.0	7.29.8
@babel/types	7.29.0	7.29.8

Required Changes

None.

Security Considerations

• No application code or secrets touched
• @babel/core is a dev dependency — no production attack surface
• All sub-package integrity hashes are updated in the lockfile (standard npm lockfile behavior)

Verdict

[x] ✅ Approve — Ready to merge.

This is a routine, low-risk Dependabot update with no application code changes. CI tests (if passing) are sufficient validation. No Vue-specific concerns apply.