build(deps): bump @babel/plugin-transform-modules-systemjs from 7.27.1 to 7.29.8

[dependabot]

Bumps @babel/plugin-transform-modules-systemjs from 7.27.1 to 7.29.8.

Release notes

Sourced from @​babel/plugin-transform-modules-systemjs's releases.

v7.29.8 (2026-07-31)

👓 Spec Compliance

• babel-generator, babel-parser, babel-plugin-transform-spread, babel-traverse, babel-types
  • #17871 Disallow super call after new (@​JLHwung)

🐛 Bug Fix

• babel-generator
  • #18046 fix(generator): improve new callee parens check (@​JLHwung)
• babel-node, babel-plugin-transform-modules-systemjs
  • #18044 fix(systemjs): support __proto__ as an export name (@​JLHwung)

Committers: 2

• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

• babel-generator
  • #18014 Catchup source map position in preserveFormat (@​nicolo-ribaudo)
• babel-core
  • #18001 [7.x packport]Improve input source map handling (@​JLHwung)
• babel-core, babel-generator
  • #17998 Preserve original identifier names from input sourcemaps (#17992) (@​Andarist)

Committers: 3

• Huáng Jùnliàng (@​JLHwung)
• Mateusz Burzyński (@​Andarist)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

• babel-preset-env
  • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

• babel-plugin-transform-modules-systemjs
  • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

• Huáng Jùnliàng (@​JLHwung)

... (truncated)

Commits

• 5de11ca v7.29.8
• f08d434 fix(systemjs): support proto as an export name (#18044)
• 4fba754 v7.29.7
• a458f66 v7.29.4
• 32ebd5a [7.x backport]fix(systemjs): improve module string name support (#17974)
• aa8394e v7.29.0
• 0053db6 Update polyfill packages (#17727)
• 61647ae v7.28.5
• a177d55 [Babel 8] Use t.traverseFast to replace some path.traverse (#17518)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​babel/plugin-transform-modules-systemjs since your current version.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[martastn]

@dependabot rebase

[martastn]

Verdict: Safe to merge

Bump: @babel/plugin-transform-modules-systemjs 7.27.1 → 7.29.8 (minor, transitive via react-scripts → @babel/preset-env) + @babel/helper-plugin-utils 7.27.1 → 7.29.7; lockfile only, nothing else

Changes:

• Fixes GHSA-fv7c-fp4j-7gwp (high, code injection when compiling untrusted code to SystemJS); npm audit shows 0 @babel advisories after merge
• __proto__ export-name fix (SystemJS only); helper-plugin-utils: no-op refactors

Usage in repo: not imported; CRA's preset-env runs with modules: false (webpack) / commonjs (jest), so the SystemJS transform never runs

Impact: none

Verified:

• tsc ✅ · unit tests ✅ (28/28, same as master) · build ✅ (bundle Δ 0 B: build/ is byte-identical to master's except the checkout path webpack inlines)
• E2E (Selenium, 4 runs each): same results as master; ProjectMenu is flaky on both (reads dialog text mid-fade)
• Manual UI/functional diff vs master: editor 3D, scene tree, add/edit object, example load, export/import, Pyodide converter, JSROOT 1D/2D results, dialogs, hover/tooltips, light theme, narrow window, console/network: no differences