Update Babel deps (and group similar updates)

[j9t]

Resolves #67, #68

Summary by CodeRabbit

• Chores
  • Updated development build dependencies to newer Babel versions.
  • Improved automated dependency update handling by grouping related tooling updates together.
  • Adjusted dependency resolution for the build pipeline to keep Babel packages consistent.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​babel/​core@​8.0.1
	@​babel/​preset-env@​7.29.7 ⏵ 8.0.2	+1		+4

View full report

[j9t]

@CodeRabbit review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Important

Review skipped

No new commits to review since the last review.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 08dbf8cf-9488-4e1e-9c3b-64040d1b65ee

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

Walkthrough

Bumps Babel devDependencies (@babel/core, @babel/preset-env) from v7 to v8, adds a package.json overrides entry pinning @rollup/plugin-babel's @babel/core resolution to the root dependency, and adds Dependabot grouping rules for babel, eslint, stylelint, and vitest npm packages.

Changes

Dependency updates and tooling config

Layer / File(s)	Summary
Babel devDependency bump and override package.json	@babel/core and @babel/preset-env bumped from ^7.29.7 to ^8.0.1/^8.0.2; new overrides section pins @rollup/plugin-babel's @babel/core to the root version.
Dependabot grouping configuration .github/dependabot.yml	New groups block groups npm update PRs matching babel, eslint, stylelint, and vitest package patterns.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Out of Scope Changes check	⚠️ Warning	The Dependabot grouping changes are unrelated to the linked Babel upgrade issue and go beyond the provided objective.	Move the Dependabot grouping update to its own issue or remove it from this PR if it is not part of the linked scope.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the Babel dependency upgrade and related grouping change.
Linked Issues check	✅ Passed	The Babel 8 devDependency bump and @babel/core override address the linked upgrade and peer-alignment requirements.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch update-babel-8

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@package.json`:
- Around line 71-75: The override forcing `@babel/core` into `@rollup/plugin-babel`
should be removed or adjusted because plugin-babel is still on the Babel
7-compatible release. Update the dependency path in package.json so
`@rollup/plugin-babel` is either upgraded to a Babel 8-compatible version or left
to resolve its declared `@babel/core` range, and verify the Rollup setup in
rollup.config.js continues to work with the selected version.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 9cd6355a-8bce-4f89-8948-d328884de124

📥 Commits

Reviewing files that changed from the base of the PR and between 6a8caa0 and 6e0e80d.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (2)

• .github/dependabot.yml
• package.json