fix(@angular/build): bump @babel/core to 7.29.7

alan-agius4 · alan-agius4 · commit 4ddea651a957 · 2026-06-19T09:46:19.000Z
Bumps @babel/core to 7.29.7 to address GHSA-4x5r-pxfx-6jf8 / CVE-2026-49356. Fixes #33420.
diff --git a/packages/angular/build/package.json b/packages/angular/build/package.json
@@ -20,7 +20,7 @@
   "dependencies": {
     "@ampproject/remapping": "2.3.0",
     "@angular-devkit/architect": "workspace:0.0.0-EXPERIMENTAL-PLACEHOLDER",
-    "@babel/core": "7.28.3",
+    "@babel/core": "7.29.7",
     "@babel/helper-annotate-as-pure": "7.27.3",
     "@babel/helper-split-export-declaration": "7.24.7",
     "@inquirer/confirm": "5.1.14",
diff --git a/packages/angular_devkit/build_angular/package.json b/packages/angular_devkit/build_angular/package.json
@@ -11,7 +11,7 @@
     "@angular-devkit/build-webpack": "workspace:0.0.0-EXPERIMENTAL-PLACEHOLDER",
     "@angular-devkit/core": "workspace:0.0.0-PLACEHOLDER",
     "@angular/build": "workspace:0.0.0-PLACEHOLDER",
-    "@babel/core": "7.28.3",
+    "@babel/core": "7.29.7",
     "@babel/generator": "7.28.3",
     "@babel/helper-annotate-as-pure": "7.27.3",
     "@babel/helper-split-export-declaration": "7.24.7",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
