Bump @babel/eslint-parser from 7.29.7 to 7.29.9

[dependabot]

Bumps @babel/eslint-parser from 7.29.7 to 7.29.9.

Release notes

Sourced from @​babel/eslint-parser's releases.

v7.29.9 (2026-09-18)

🐛 Bug Fix

• babel-plugin-transform-typescript
  • #18247 [ts] Allow merging enum into a namespace (@​nicolo-ribaudo)
• babel-parser
  • #18241 Fix parsing of arrow function params inside ternaries with Flow (@​robhogan)

🏠 Internal

• babel-parser
  • #18245 test: test with ts-eslint 8.70.0 (@​JLHwung)

Committers: 4

• Huáng Jùnliàng (@​JLHwung)
• Joelle Mahfoud (@​joelle-a-dev)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Rob Hogan (@​robhogan)

v7.29.8 (2026-07-31)

👓 Spec Compliance

• babel-generator, babel-parser, babel-plugin-transform-spread, babel-traverse, babel-types
  • #17871 Disallow super call after new (@​JLHwung)

🐛 Bug Fix

• babel-generator
  • #18046 fix(generator): improve new callee parens check (@​JLHwung)
• babel-node, babel-plugin-transform-modules-systemjs
  • #18044 fix(systemjs): support __proto__ as an export name (@​JLHwung)

Committers: 2

• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)

Commits

• 54405f2 v7.29.9
• 092e6e5 test: test with ts-eslint 8.70.0 (#18245)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[psiinon]

Checkmarx One – Scan Summary & Details – 81ed7b7e-9ad6-4e18-ba37-ff526470c3e2

---

New Issues (4 out of 4)

Checkmarx found the following issues in this Pull Request

Severity: 2 High · 2 Medium

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		CVE-2026-93687	Npm-braces-3.0.3	details Description: Braces contain a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace pattern... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
2		CVE-2026-93690	Npm-uri-js-4.4.1	details Description: uri-js through 4.4.1 contains a denial of service vulnerability in the "removeDotSegments" function that loops infinitely when a path segment begin... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
3		CVE-2026-86472	Npm-fast-uri-3.1.7	details Recommended version: 3.1.8 Description: fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv. In versions prior to 2.4.7, 3.0.0 prior to 3.1.8, and 4.0.0... Attack Vector: NETWORK Attack Complexity: HIGH Vulnerable Package
4		CVE-2026-93751	Npm-uri-js-4.4.1	details Description: uri-js through 4.4.1 contains an improper UTF-8 decoding vulnerability in pctDecChars() that decodes invalid and overlong percent-encoded sequences... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package

---

Use @Checkmarx to take action directly from this PR:

• Rescan the PR

Try it: @Checkmarx how can you help? · @Checkmarx rescan this PR