fix(deps): update all core dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/core (source)	7.26.0 -> 7.26.7
@babel/preset-env (source)	7.26.0 -> 7.26.7
@babel/runtime (source)	7.26.0 -> 7.26.7
@types/lodash (source)	4.17.13 -> 4.17.14
snyk	1.1294.3 -> 1.1295.2

---

Release Notes

babel/babel (@​babel/core)

v7.26.7

Compare Source

🐛 Bug Fix

• babel-helpers, babel-preset-env, babel-runtime-corejs3
  • #​17086 Make "object without properties" helpers ES6-compatible (@​tquetano-netflix)
• babel-plugin-transform-typeof-symbol
  • #​17085 fix: Correctly handle typeof in arrow functions (@​liuxingbaoyu)
• babel-parser
  • #​17079 Respect ranges option in estree method value (@​JLHwung)
• babel-core
  • #​17052 Do not try to parse .ts configs as JSON if natively supported (@​nicolo-ribaudo)
• babel-plugin-transform-typescript
  • #​17050 fix: correctly resolve references to non-constant enum members (@​branchseer)
• babel-plugin-transform-typescript, babel-traverse, babel-types
  • #​17025 fix: Remove type-only import x = y.z (@​liuxingbaoyu)

snyk/snyk (snyk)

v1.1295.2

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Bug Fixes

• general: revert dependencies upgrade which introduced a regression on a number of Linux installations

v1.1295.1

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Bug Fixes

• security: Upgrades goproxy to 1.5 to address a high severity vulnerability
• security: Upgrades dependencies in IaC plugin to address CVE-2025-21614

v1.1295.0

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

• iac: include evidence field in json output [IAC-3161] (9487a08)
• auth: auto detect API Url during OAuth authentication (6884511)

Bug Fixes

• test: support verbose gradle graphs for sbom generation (600ef50)
• general: prevent snyk-policy lib from interrupting stdout to ensure valid --json --sarif output (469edf5)
• general: improved error messages around network requests (f6fc5f7)
• general: only read SNYK_ prefixed env vars (5bfcbe8)
• instrumentation: add default oss product for monitor as well (83cabc3)
• container: optional dependencies are properly connected in the dep-graph (3205e66)
• container: package-lock v3 missing sub-dependencies 94c9b7f)
• container: support --exclude-app-vulns with oauth (73a75fa)
• monitor: use error catalog messages for monitor commands (4e58601)
• iac: extra error handling and debugging [IAC-3138] (7fbae0f)
• iac: snyk-iac-test security update [IAC-3171] (fac22bb)
• iac: update snyk-iac-parsers version [IAC-3138] (5326d9d)
• iac: use proxy aware snyk-iac-test [INC-1647] (d5d1e2e)
• test: do not treat warnings as errors on restore (d0113eb)
• test:fix mismatch/off-by-one on unmanagedDependencyCount in the analytics logs UNIFY-340 (75d8e6d)
• test: update snyk-nodejs-plugin to fix micromatch vuln (766bd1d)
• test: upgrade mvn-plugin to handle jar scanning sha-not-found error (060380a)
• test: fix runtime versions overwriting nuget versions (5e715cf)
• instrumentation: stop sending CLI args in analytics (6d183fb)
• policy update policy library to fix valid json output (0bc0aed)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/core@7.26.7 🔁 npm/@babel/core@7.26.0	None	+38	16.9 MB	existentialism, hzoo, jlhwung, ...1 more
npm/@babel/preset-env@7.26.7 🔁 npm/@babel/preset-env@7.26.0	Transitive: filesystem, unsafe	+126	21.8 MB	existentialism, hzoo, jlhwung, ...1 more
npm/@babel/runtime@7.26.7 🔁 npm/@babel/runtime@7.26.0	None	+1	276 kB	existentialism, hzoo, jlhwung, ...1 more
npm/@types/lodash@4.17.14 🔁 npm/@types/lodash@4.17.13	None	0	868 kB	types

View full report↗︎