[7.x packport]Improve input source map handling - #18001

# Bump @babel/core from 7.28.5 to 7.29.7

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from **7.28.5** to **7.29.7**.

## Release Notes

*Sourced from [@babel/core's releases](https://github.com/babel/babel/releases).*

### v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations.

---

### v7.29.6 (2026-05-25)

#### 🐛 Bug Fixes

- **`babel-generator`**
  - [#18014](babel/babel#18014) Catchup source map position in preserveFormat  
    ([`@nicolo-ribaudo`](https://github.com/nicolo-ribaudo))

- **`babel-core`**
  - [#18001](babel/babel#18001) [7.x backport] Improve input source map handling  
    ([`@JLHwung`](https://github.com/JLHwung))

- **`babel-core`, `babel-generator`**
  - [#17998](babel/babel#17998) Preserve original identifier names from input sourcemaps  
    ([#17992](babel/babel#17992))  
    ([`@Andarist`](https://github.com/Andarist))

#### Committers

- Huáng Jùnliàng ([`@JLHwung`](https://github.com/JLHwung))
- Mateusz Burzyński ([`@Andarist`](https://github.com/Andarist))
- Nicolò Ribaudo ([`@nicolo-ribaudo`](https://github.com/nicolo-ribaudo))

---

### v7.29.5 (2026-05-05)

#### 🏠 Internal

- **`babel-preset-env`**
  - Update `@babel/*` dependencies

---

### v7.29.4 (2026-05-05)

#### 🐛 Bug Fixes

- **`babel-plugin-transform-modules-systemjs`**
  - [#17974](babel/babel#17974)  
    [7.x backport] fix(systemjs): improve module string name support  
    ([`@JLHwung`](https://github.com/JLHwung))

#### Committers

- Huáng Jùnliàng ([`@JLHwung`](https://github.com/JLHwung))

---

### v7.29.3 (2026-04-30)

#### 👓 Spec Compliance

- **`babel-parser`**
  - [#17923](babel/babel#17923) Support flow extends bound  
    ([`@JLHwung`](https://github.com/JLHwung))

#### 🐛 Bug Fixes

- **`babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators`**
  - [#17931](babel/babel#17931)  
    fix(decorators): replace super within all removed static elements  
    ([`@JLHwung`](https://github.com/JLHwung))

- **`babel-register`**
  - [#17915](babel/babel#17915)  
    Fix thread synchronization issues in `@babel/register`  
    ([`@liuxingbaoyu`](https://github.com/liuxingbaoyu))

- **`babel-compat-data`, `babel-plugin-bugfix-safari-rest-destructuring-rhs-array`, `babel-preset-env`**
  - [#17788](babel/babel#17788)  
    Add bugfix plugin for Safari array rest destructuring bug  
    ([`@JLHwung`](https://github.com/JLHwung))

#### 💅 Polish

- **`babel-parser`**

---

## Included Commits

- [`4fba754`](babel/babel@4fba754) — v7.29.7
- [`04ea6b2`](babel/babel@04ea6b2) — v7.29.6
- [`99f498a`](babel/babel@99f498a) — [7.x backport] Improve input source map handling (#18001)
- [`feba0a3`](babel/babel@feba0a3) — Preserve original identifier names from input sourcemaps (#17992, #17998)
- [`aa8394e`](babel/babel@aa8394e) — v7.29.0
- [`ad0d03f`](babel/babel@ad0d03f) — [7.x backport] feat: Allow specifying startLine in code frame (#17739)
- [`d7f4008`](babel/babel@d7f4008) — v7.28.6
- [`e130225`](babel/babel@e130225) — Polish(standalone): improve message on invalid preset/plugin (#17606)
- [`99dcba5`](babel/babel@99dcba5) — chore: enable some ts-eslint rules (#17592)
- [`c92c491`](babel/babel@c92c491) — Improve Unicode handling in code-frame tokenizer (#17589)

## Full Diff

https://github.com/babel/babel/commits/v7.29.7/packages/babel-core

…dates (#1146)

# Bump npm_and_yarn group with 3 updates

Bumps the `npm_and_yarn` dependency group with 3 updates in the `/internal/serve/sep24frontend/app` directory:

- [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite)
- [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core)
- [js-yaml](https://github.com/nodeca/js-yaml)

---

# Updates `vite` from 7.3.2 to 7.3.5

## Release Notes

*Sourced from [vite releases](https://github.com/vitejs/vite/releases).*

### v7.3.5

Please refer to the [CHANGELOG.md](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md) for details.

### v7.3.3

Please refer to the [CHANGELOG.md](https://github.com/vitejs/vite/blob/v7.3.3/packages/vite/CHANGELOG.md) for details.

## Changelog

*Sourced from [vite's changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md).*

### [7.3.5](vitejs/vite@v7.3.3...v7.3.5) (2026-06-01)

#### Bug Fixes

- Backport [#22572](vitejs/vite#22572), reject Windows alternate paths ([#22574](vitejs/vite#22574))  
  ([8c18556](vitejs/vite@8c18556))

- **deps:** Backport [#22571](vitejs/vite#22571), reject UNC paths for launch-editor-middleware ([#22573](vitejs/vite#22573))  
  ([f20d64b](vitejs/vite@f20d64b))

#### Miscellaneous Chores

- Skip v7.3.4 release  
  ([8a6a0c9](vitejs/vite@8a6a0c9))

### [7.3.4](vitejs/vite@v7.3.3...v7.3.4) (2026-06-01)

#### Bug Fixes

- Backport [#22572](vitejs/vite#22572), reject Windows alternate paths ([#22574](vitejs/vite#22574))  
  ([8c18556](vitejs/vite@8c18556))

- **deps:** Backport [#22571](vitejs/vite#22571), reject UNC paths for launch-editor-middleware ([#22573](vitejs/vite#22573))  
  ([f20d64b](vitejs/vite@f20d64b))

### [7.3.3](vitejs/vite@v7.3.2...v7.3.3) (2026-05-07)

#### Bug Fixes

- Avoid destructure lowering for newer Safari ([#22346](vitejs/vite#22346))  
  ([5ab51c0](vitejs/vite@5ab51c0))

## Included Commits

- [`077945c`](vitejs/vite@077945c) — release: v7.3.5
- [`8a6a0c9`](vitejs/vite@8a6a0c9) — chore: skip v7.3.4 release
- [`8c18556`](vitejs/vite@8c18556) — fix: backport #22572, reject Windows alternate paths
- [`f20d64b`](vitejs/vite@f20d64b) — fix(deps): backport #22571, reject UNC paths
- [`ca31424`](vitejs/vite@ca31424) — release: v7.3.3
- [`5ab51c0`](vitejs/vite@5ab51c0) — fix: avoid destructure lowering for newer Safari

Full diff:

https://github.com/vitejs/vite/commits/v7.3.5/packages/vite

---

# Updates `@babel/core` from 7.28.0 to 7.29.7

## Release Notes

*Sourced from [@babel/core releases](https://github.com/babel/babel/releases).*

### v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations.

### v7.29.6 (2026-05-25)

#### 🐛 Bug Fixes

- **`babel-generator`**
  - [#18014](babel/babel#18014) Catchup source map position in preserveFormat  
    ([`@nicolo-ribaudo`](https://github.com/nicolo-ribaudo))

- **`babel-core`**
  - [#18001](babel/babel#18001) [7.x backport] Improve input source map handling  
    ([`@JLHwung`](https://github.com/JLHwung))

- **`babel-core`, `babel-generator`**
  - [#17998](babel/babel#17998) Preserve original identifier names from input sourcemaps  
    ([#17992](babel/babel#17992))  
    ([`@Andarist`](https://github.com/Andarist))

#### Committers

- Huáng Jùnliàng ([`@JLHwung`](https://github.com/JLHwung))
- Mateusz Burzyński ([`@Andarist`](https://github.com/Andarist))
- Nicolò Ribaudo ([`@nicolo-ribaudo`](https://github.com/nicolo-ribaudo))

### v7.29.5 (2026-05-05)

#### Internal

- **`babel-preset-env`**
  - Update `@babel/*` dependencies

### v7.29.4 (2026-05-05)

#### Bug Fix

- **`babel-plugin-transform-modules-systemjs`**
  - [#17974](babel/babel#17974) Fix module string name support

### v7.29.3 (2026-04-30)

#### Spec Compliance

- **`babel-parser`**
  - [#17923](babel/babel#17923) Support flow extends bound

#### Bug Fixes

- Fix decorators replacing `super` within removed static elements
- Fix thread synchronization issues in `@babel/register`
- Add Safari array rest destructuring bugfix plugin

#### Polish

- **`babel-parser`**

## Included Commits

- [`4fba754`](babel/babel@4fba754) — v7.29.7
- [`04ea6b2`](babel/babel@04ea6b2) — v7.29.6
- [`99f498a`](babel/babel@99f498a) — Improve input source map handling
- [`feba0a3`](babel/babel@feba0a3) — Preserve original identifier names from input sourcemaps
- [`aa8394e`](babel/babel@aa8394e) — v7.29.0

Full diff:

https://github.com/babel/babel/commits/v7.29.7/packages/babel-core

---

# Updates `js-yaml` from 4.1.1 to 4.2.0

## Changelog

*Sourced from [js-yaml's changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md).*

## [4.2.0] - 2026-06-01

### Added

- Added `docs/safety.md` with notes about processing untrusted YAML.
- Added `maxDepth` (100) loader option to prevent stack overflow errors.
- Added `maxMergeSeqLength` (20) loader option for additional safety restrictions.
- Added sourcemaps to `dist/` builds.

### Changed

- Stop resolving numbers with underscores as numeric scalars ([#627](nodeca/js-yaml#627)).
- Switched development toolchains to Vite / neostandard.
- Updated demo.
- Reorganized tests.
- `dist/` files are no longer kept in the repository.

### Fixed

- Fix parsing of properties on the first implicit block mapping key.
- Fix trailing whitespace handling when folding flow scalar lines.
- Reject top-level block scalars without content indentation.
- Ensure numbers survive round-trip.
- Fix test coverage issues.
- Fix flow scalar trailing whitespace folding.
- Fix digits in YAML named tag handles.

### Security

- Fix potential DoS via quadratic complexity in merge by deduplicating repeated elements.

---

## Dependabot

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself.

You can trigger Dependabot actions by commenting:

- `@dependabot rebase` — Rebase this PR
- `@dependabot recreate` — Recreate this PR
- `@dependabot ignore <dependency>` — Ignore future updates for a dependency
- `@dependabot unignore <dependency>` — Remove ignore rules