Babel 7.24.0 is out!

On October 10th, 2023, I stumbled upon an arbitrary code execution vulnerability in Babel, which was subsequently assigned the identifier CVE-2023-45133. In this post, I’ll walk you through the journey of discovering and exploiting this intriguing flaw.

We just released Babel 7.23.0! 🎉

Babel 7.22.0 is out, with parsing/transform support for the Explicit Resource Management proposal, including both the sync and async variants, and with parsing support for the Import Attributes (an evolution of the old Import Assertions proposal).

We just published Babel 7.21.0!

We just published Babel 7.20.0!

We just published Babel 7.19.0!

We just published Babel 7.18.0!

We just published Babel 7.17.0!

We just published Babel 7.16.0!

This release enables parsing top-level await (Stage 4 at the May meeting) and transforming ergonomic brand checks for private fields (Stage 4 at the July meeting) by default. There is also now support for the Hack-style pipeline operator. We also improved our TypeScript support, implementing transform support for const enums and namespace aliases, and we expanded our heuristics to add .displayName to React components created by React.createContext() (#13501).

Since 2018, Babel has been doing a funding experiment: can full time work on Babel be sustained? We've learned the answer might be no.

Babel 7.14.0 is out!

We just published Babel 7.13.0, the first minor release of 2021!

We just published a new minor version of Babel!

We just released a new minor version of Babel!

babel-eslint is moved to @babel/eslint-parser!

We just released a new minor version of Babel!

While preparing the Babel 8.0.0 release (in the next months), we just finished working on a new minor release which includes updates related to @babel/preset-env, TypeScript 3.8, Flow, and JSX!

This is the first release of the year! 🎉