[dependabot]

Bumps babel-loader from 9.2.1 to 10.1.1.

Release notes

Sourced from babel-loader's releases.

v10.1.1

What's Changed

• Revert #1055 ("use module.findPackageJSON API") by @​JLHwung in babel/babel-loader#1066

Full Changelog: babel/babel-loader@v10.1.0...v10.1.1

v10.1.0

What's Changed

• refactor: use module.findPackageJSON API by @​JLHwung in babel/babel-loader#1055
• Enable type checking and support Babel 8 by @​JLHwung in babel/babel-loader#1056
• Bump js-yaml from 4.1.0 to 4.1.1 by @​dependabot[bot] in babel/babel-loader#1059
• fix: mark webpack as optional peer dependency by @​chenjiahan in babel/babel-loader#1061
• Bump webpack from 5.101.0 to 5.104.1 by @​dependabot[bot] in babel/babel-loader#1062
• Bump glob from 10.4.5 to 10.5.0 by @​dependabot[bot] in babel/babel-loader#1060
• Bump minimatch from 3.1.2 to 3.1.5 by @​dependabot[bot] in babel/babel-loader#1063
• Pin Node.js on CI by @​nicolo-ribaudo in babel/babel-loader#1064

New Contributors

• @​chenjiahan made their first contribution in babel/babel-loader#1061

Full Changelog: babel/babel-loader@v10.0.0...v10.1.0

v10.0.0

What's Changed

Breaking Changes

• bump node requirement to ^18.20.0 || ^20.10.0 || >=22.0.0 and webpack requirement to >= 5.61.0 by @​JLHwung in babel/babel-loader#1026
• breaking: use output.hashFunction as loader cache hasher by @​JLHwung in babel/babel-loader#1027

New Features

• Add babel-loader logger by @​JLHwung in babel/babel-loader#1034
• Support cache with external dependencies by @​JLHwung in babel/babel-loader#1033

Bug Fixes

• [Bugfix] Ensure stability of filename cache-keys by @​stefanpenner in babel/babel-loader#909

Docs

• docs: clarify that cacheIdentifier is computed from the merged options by @​JLHwung in babel/babel-loader#1000
• Create SECURITY.md by @​JLHwung in babel/babel-loader#1032
• Add babel-loader v10 readme by @​JLHwung in babel/babel-loader#1046
• add readme section for loggingDebug support by @​JLHwung in babel/babel-loader#1038
• Update readme and repo templates by @​JLHwung in babel/babel-loader#1041

Dependencies

• migrate to c8 by @​JLHwung in babel/babel-loader#996
• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in babel/babel-loader#998
• Bump dev dependencies by @​JLHwung in babel/babel-loader#1001

... (truncated)

Commits

• da60210 10.1.1
• a0a2617 Revert #1055 ("use module.findPackageJSON API") (#1066)
• de09ee1 10.1.0
• e34c360 Pin Node.js on CI (#1064)
• 3c1e180 Bump minimatch from 3.1.2 to 3.1.5 (#1063)
• e0d4add Bump glob from 10.4.5 to 10.5.0 (#1060)
• 77e2a66 Bump webpack from 5.101.0 to 5.104.1 (#1062)
• faa5dbb fix: mark webpack as optional peer dependency (#1061)
• 146dad2 Bump js-yaml from 4.1.0 to 4.1.1 (#1059)
• 2479ed2 Enable type checking and support Babel 8 (#1056)
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: LeanerCloud/cloud-commitments-platform
• Branch: main
• File: .coderabbit.yaml
• Commit: 67701b3
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 62c533a9-5bc3-41ee-b446-f47cfa91df90

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[cristim]

@dependabot rebase

[cristim]

Merge gate record (burndown orchestrator)

Independent adversarial review (claude-opus-5-5)
#1638 @ ee75d7f: NO CONFIRMED FINDINGS

• Merges cleanly. babel-loader 10.1.1 peers @babel/core ^7.12.0 || ^8.0.0-beta.1; the lockfile resolves @babel/core 7.29.7 and npm ls --all exits 0, so it works without chore(deps): Bump @babel/core from 7.29.7 to 8.0.9 in /frontend #1636.
• Breaking changes (Node ^18.20 || ^20.10 || >=22, webpack >= 5.61, output.hashFunction as cache hasher, find-cache-dir -> find-up) do not hit us; the only option is presets: ['@babel/preset-env'].
• The only babel-loader rule matches .js outside node_modules (webpack.config.js:33-41) and frontend/src has no .js files, so bundle hashes are unchanged. A scratch probe confirms the loader still transpiles (?. to ES5) when it does run.
• Production build and typecheck exit 0; lint 0 errors; jest 175/175 suites.

Local verification
Local verification on macOS @ ee75d7f: PASS

• babel-loader 10.1.1 installed; npm ci, npm test (175 suites, 4595 passed, 1 skipped), lint and npm run build exit 0.
• dist identical to the merge-base build (656 files). Home, Opportunities and Plans render with only the known 401.

CodeRabbit not run: the exact-SHA local verification and the Opus review above cover this SHA (repo CLAUDE.md review gate).

[cristim]

@dependabot rebase

[cristim]

Merge gate record (burndown orchestrator)

Independent adversarial review (claude-opus-5-5)
#1638 @ ee75d7f: NO CONFIRMED FINDINGS

• Merges cleanly. babel-loader 10.1.1 peers @babel/core ^7.12.0 || ^8.0.0-beta.1; the lockfile resolves @babel/core 7.29.7 and npm ls --all exits 0, so it works without chore(deps): Bump @babel/core from 7.29.7 to 8.0.9 in /frontend #1636.
• Breaking changes (Node ^18.20 || ^20.10 || >=22, webpack >= 5.61, output.hashFunction as cache hasher, find-cache-dir -> find-up) do not hit us; the only option is presets: ['@babel/preset-env'].
• The only babel-loader rule matches .js outside node_modules (webpack.config.js:33-41) and frontend/src has no .js files, so bundle hashes are unchanged. A scratch probe confirms the loader still transpiles (?. to ES5) when it does run.
• Production build and typecheck exit 0; lint 0 errors; jest 175/175 suites.

After #1657 merged, Dependabot rebased this PR. Re-check @ c2046e7, same reviewer: NO CONFIRMED FINDINGS. The only package.json change is still babel-loader 9.2.1 -> 10.1.1; the lockfile changes only the babel-loader subtree (same package-level diff as at ee75d7f; find-up 5.0.0 still present); main's recent bumps are kept; merges cleanly into main and together with #1637.

Local verification
Local verification on macOS @ ee75d7f: PASS

• babel-loader 10.1.1 installed; npm ci, npm test (175 suites, 4595 passed, 1 skipped), lint and npm run build exit 0.
• dist identical to the merge-base build (656 files). Home, Opportunities and Plans render with only the known 401.

Re-verification @ c2046e7 (after the Dependabot rebase onto main 67701b3): PASS. npm ci, npm test (179 suites, 4644 passed, 1 skipped), lint and npm run build exit 0; dist file list identical to main's build; login, Home, Opportunities and Plans render with only the known harness 401.

CodeRabbit not run: the exact-SHA local verification and the Opus review above cover this SHA (repo CLAUDE.md review gate).