[Snyk] Upgrade core-js from 3.6.5 to 3.33.0 #3664
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade core-js from 3.6.5 to 3.33.0. See this package in npm: https://www.npmjs.com/package/core-js See this project in Snyk: https://app.snyk.io/org/mrrio/project/50515eb1-b03b-4f42-9f17-cce1a33d5d1a?utm_source=github&utm_medium=referral&page=upgrade-pr
# Conflicts: # package-lock.json
HackbrettXXX
deleted the
snyk-upgrade-b3262b051b4a594e1fdd1d28b2be1414
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.6.5 to 3.33.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: core-js
-
3.33.0 - 2023-10-01
- Re-introduced
- Added
- Some years ago, it was presented in
- Added
- Optimized
- Fixed some conversion cases of
- Fully forced polyfilling of the TC39
- Added an extra workaround of errors with exotic environment objects in
- Some minor fixes and stylistic changes
- Compat data improvements:
- V8 unshipped
- Added Deno 1.37 compat data mapping
- Added Electron 28 compat data mapping
- Added Opera Android 78 compat data mapping
-
3.32.2 - 2023-09-07
- Fixed
- Added a workaround of old WebKit +
- Compat data improvements:
- Added Samsung Internet 23 compat data mapping
- Added Quest Browser 29 compat data mapping
-
3.32.1 - 2023-08-18
- Fixed some cases of IEEE754 rounding, #1279, thanks @ petamoriken
- Prevented injection
- Some minor fixes and stylistic changes
- Compat data improvements:
- Added Opera Android 77 compat data mapping
- Updated Electron 27 compat data mapping
-
3.32.0 - 2023-07-27
- Moved back to stage 3
- Added
- Moved to stage 3
- Added
- Throw on negative
- Removed
- Iterator Helpers stage 3 proposal:
- Avoid creating observable
- Async explicit resource management:
- Moved back into the initial proposal -> moved to stage 3, proposal-explicit-resource-management/154
- Added
- Ignore return value of
- Added ticks for empty resources, proposal-explicit-resource-management/163
- Added some methods from
- There are some reason why I don't want to add
- Methods:
- Added
- Methods:
- Used strict mode in some missed cases, #1269
- Fixed a Chromium 117 bug in
- Fixed early WebKit ~ Safari 17.0 beta
- Fixed incorrect
- Fixed forced polyfilling of some iterator helpers that should return wrapped iterator in the pure version
- Fixed and exposed
- Compat data improvements:
- Sync
- Mark
- Added Electron 27 compat data mapping
-
3.31.1 - 2023-07-06
- Fixed a
- Fixed the order of arguments validation in
- Allowed cloning of
- Compat data improvements:
- New
- Added Deno 1.35 compat data mapping
- Added Quest Browser 28 compat data mapping
- Added missing NodeJS 12.16-12.22 compat data mapping
- Updated Opera Android 76 compat data mapping
-
3.31.0 - 2023-06-11
- Well-formed unicode strings proposal:
- Methods:
- Moved to stable ES, May 2023 TC39 meeting
- Added
- Because of the web compat issue, moved from prototype to static methods. Added:
- Demoted to stage 2
- Decorator Metadata proposal, May 2023 TC39 meeting updates:
- Moved to stage 3
- Added
- Added
- Iterator Helpers stage 3 proposal:
- Changed
- Removed
- Added
- The methods renamed to end with
- Added
- Fixed some cases of increasing buffer size in
- Fixed awaiting async
- Fixed
- Added a workaround in
- Added TypeScript definitions to
- Compat data improvements:
- Methods from the change
- Added Deno 1.34 compat data mapping
- Added Electron 26 compat data mapping
- Added Samsung Internet 22 compat data mapping
- Added Opera Android 75 and 76 compat data mapping
- Added Quest Browser 27 compat data mapping
-
3.30.2 - 2023-05-06
- Added a fix for a NodeJS 20.0.0 bug with cloning
- Added protection from Terser unsafe
- Added a workaround for getting proper global object in Figma plugins, #1231
- Compat data improvements:
- Added NodeJS 20.0 compat data mapping
- Added Deno 1.33 compat data mapping
-
3.30.1 - 2023-04-13
- Added a fix for a NodeJS 19.9.0
- Compat data improvements:
-
3.30.0 - 2023-04-03
-
3.29.1 - 2023-03-13
- Fixed dependencies of some entries
- Fixed
- Added Opera Android 74 compat data mapping
-
3.29.0 - 2023-02-26
-
3.28.0 - 2023-02-13
-
3.27.2 - 2023-01-18
-
3.27.1 - 2022-12-29
-
3.27.0 - 2022-12-25
-
3.26.1 - 2022-11-13
-
3.26.0 - 2022-10-23
-
3.25.5 - 2022-10-03
-
3.25.4 - 2022-10-02
-
3.25.3 - 2022-09-25
-
3.25.2 - 2022-09-18
-
3.25.1 - 2022-09-07
-
3.25.0 - 2022-08-24
-
3.24.1 - 2022-07-29
-
3.24.0 - 2022-07-25
-
3.23.5 - 2022-07-17
-
3.23.4 - 2022-07-09
-
3.23.3 - 2022-06-25
-
3.23.2 - 2022-06-20
-
3.23.1 - 2022-06-14
-
3.23.0 - 2022-06-13
-
3.22.8 - 2022-06-01
-
3.22.7 - 2022-05-24
-
3.22.6 - 2022-05-22
-
3.22.5 - 2022-05-10
-
3.22.4 - 2022-05-02
-
3.22.3 - 2022-04-28
-
3.22.2 - 2022-04-21
-
3.22.1 - 2022-04-19
-
3.22.0 - 2022-04-15
-
3.21.1 - 2022-02-16
-
3.21.0 - 2022-02-01
-
3.20.3 - 2022-01-15
-
3.20.2 - 2022-01-01
-
3.20.1 - 2021-12-23
-
3.20.0 - 2021-12-15
-
3.19.3 - 2021-12-06
-
3.19.2 - 2021-11-29
-
3.19.1 - 2021-11-02
-
3.19.0 - 2021-10-25
-
3.18.3 - 2021-10-12
-
3.18.2 - 2021-10-05
-
3.18.1 - 2021-09-26
-
3.18.0 - 2021-09-19
-
3.17.3 - 2021-09-09
-
3.17.2 - 2021-09-02
-
3.17.1 - 2021-09-01
-
3.17.0 - 2021-09-01
-
3.16.4 - 2021-08-29
-
3.16.3 - 2021-08-24
-
3.16.2 - 2021-08-17
-
3.16.1 - 2021-08-08
-
3.16.0 - 2021-07-30
-
3.15.2 - 2021-06-29
-
3.15.1 - 2021-06-22
-
3.15.0 - 2021-06-20
-
3.14.0 - 2021-06-05
-
3.13.1 - 2021-05-29
-
3.13.0 - 2021-05-25
-
3.12.1 - 2021-05-08
-
3.12.0 - 2021-05-06
-
3.11.3 - 2021-05-05
-
3.11.2 - 2021-05-03
-
3.11.1 - 2021-04-28
-
3.11.0 - 2021-04-22
-
3.10.2 - 2021-04-19
-
3.10.1 - 2021-04-07
-
3.10.0 - 2021-03-31
-
3.9.1 - 2021-02-28
-
3.9.0 - 2021-02-18
-
3.8.3 - 2021-01-19
-
3.8.2 - 2021-01-03
-
3.8.1 - 2020-12-06
-
3.8.0 - 2020-11-25
-
3.7.0 - 2020-11-06
-
3.6.5 - 2020-04-09
from core-js GitHub release notesRegExpescaping stage 2 proposal, September 2023 TC39 meeting:RegExp.escapemethod with the new set of symbols for escapingcore-js, but it was removed after rejecting the old version of this proposalArrayBuffer.prototype.{ transfer, transferToFixedLength }and support transferring ofArrayBuffers viastructuredCloneto engines withMessageChannelMath.f16roundpolyfillMath.f16roundandDataView.prototype.{ getFloat16, setFloat16 }Observableproposal because of incompatibility with the new WHATWGObservableproposalSymbolpolyfill, #1289Iteratorhelpers because of some Web compatibility issuesPromise.withResolversmarked as supported from V8 ~ Chrome 119Arraygrouping proposal features marked as supported from FF119valueargument ofURLSearchParams.prototype.{ has, delete }marked as properly supported from V8 ~ Chrome 118URL.canParseandURLSearchParams.prototype.sizemarked as supported from Bun 1.0.2structuredClonefeature detection[email protected]bug, #1288evalbug, #1287processpolyfill tocore-jsvia some bundlers oresm.sh, #1277Promise.withResolversmarked as supported from Bun 0.7.1Arraygrouping proposal, July 2023 TC39 meeting updates:/actual/namespaces entries, unconditional forced replacement changed to feature detectionPromise.withResolversproposal, July 2023 TC39 meeting updates:/actual/namespaces entries, unconditional forced replacement changed to feature detectionSetmethods stage 3 proposal, July 2023 TC39 meeting updates::Setsizes, proposal-set-methods/88IsCallablecheck inGetKeysIterator, proposal-set-methods/101Stringwrapper objects, July 2023 TC39 meeting update, proposal-iterator-helpers/281Iteratoris not constructible from the active function object (works as an abstract class)/actual/namespace entries, unconditional forced replacement changed to feature detection[@@ dispose]()method when hint isasync-dispose, proposal-explicit-resource-management/180Float16Arraystage 3 proposal:Float16Arrayright now, however, make sense to add some methods from this proposal.Math.f16roundDataView.prototype.getFloat16DataView.prototype.setFloat16DataViewget / setUint8Clampedmethods stage 1 proposal:DataView.prototype.getUint8ClampedDataView.prototype.setUint8Clampedvalueargument ofURLSearchParams.prototype.{ has, delete }Setmethods implementation by the actual specSymbol.{ dispose, asyncDispose }descriptors from NodeJS 20.4 / transpilers helpers / userland codeAsyncIteratorPrototypecore-js/configuratoroption, #1268Iteratorhelpers proposal features marked as supported from V8 ~ Chrome 117Arraygrouping proposal features marked as supported from V8 ~ Chrome 117Symbol.{ dispose, asyncDispose }as supported from NodeJS 20.5.0 (as mentioned above, NodeJS 20.4.0 add it, but with incorrect descriptors)structuredClonebug with cloning views of transferred buffers, #1265DataViewmethodsFloat16ArrayinstructuredCloneSetmethods proposal marked as supported from Safari 17.0URLfeatures:URL.canParse,URLSearchParams.prototype.sizeandvalueargument ofURLSearchParams.prototype.{ has, delete }marked as supported from Safari 17.0valueargument ofURLSearchParams.prototype.{ has, delete }marked as supported from Deno 1.35AggregateErrorand well-formedJSON.stringifymarked as supported React Native 0.72 HermesString.prototype.isWellFormedmethodString.prototype.toWellFormedmethodes.namespace modules,/es/and/stable/namespaces entriesArraygrouping proposal, May 2023 TC39 meeting updates:Object.groupBymethodMap.groupBymethod (with the actual semantic - with a minor difference it was present in the collections methods stage 1 proposal)Function.prototype[Symbol.metadata](=== null)/actual/entriesSymbol.iteratorfallback from callable check toundefined/nullcheck, May 2023 TC39 meeting, proposal-iterator-helpers/272IsCallablecheck onNextMethod, deferring errors toCallsite, May 2023 TC39 meeting, proposal-iterator-helpers/274Promise.withResolversstage 2 proposal:Promise.withResolversmethodSymbolpredicates stage 2 proposal:Symbol, May 2023 TC39 meeting:Symbol.isRegistered->Symbol.isRegisteredSymbolmethodSymbol.isWellKnown->Symbol.isWellKnownSymbolmethodvalueargument ofURLSearchParams.prototype.{ has, delete }, url/735ArrayBuffer.prototype.{ transfer, transferToFixedLength }polyfillsAsyncDisposableStack.prototype.adoptcallback, #1258URLSearchParams#sizein ES3 engines (IE8-)Object.{ entries, values }for some IE versions bug with invisible integer keys onnull-prototype objectscore-js-compat, #1235, thanks @ susnuxSet.prototype.differencethat was missed in Bun because of a bug added in 0.6.0Array.prototype.{ group, groupToMap }marked as no longer supported in WebKit runtimes because of the mentioned above web compat issue. For example, it's disabled from Bun 0.6.2Arrayby copy proposal marked as supported from FF115Array.fromAsyncmarked as supported from FF115URL.canParsemarked as supported from FF115valueargument ofURLSearchParams.prototype.{ has, delete }marked as supported from NodeJS 20.2.0 and FF115FileviastructuredCloneStringoptimization, #1242URL.canParsemarked as supported (fixed) from NodeJS 20.1.0 and Deno 1.33.2URL.canParsebugJSON.parsesource text access proposal features marked as supported from V8 ~ Chrome 114ArrayBuffer.prototype.transferand friends proposal features marked as supported from V8 ~ Chrome 114URLSearchParams.prototype.sizemarked as supported from V8 ~ Chrome 113Read more
ToStringconversion / built-ins nature of some accessorsString.prototype.{ isWellFormed, toWellFormed }marked as supported from V8 ~ Chrome 111Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs