blacklight / platypush

A versatile and extensible platform for automation with hundreds of supported integrations
https://platypush.tech
MIT License
285 stars 21 forks source link

[Snyk] Upgrade core-js from 3.21.1 to 3.22.5 #297

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade core-js from 3.21.1 to 3.22.5.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Release notes
Package name: core-js
  • 3.22.5 - 2022-05-10
    • Ensured that polyfilled constructors .prototype is non-writable
    • Ensured that polyfilled methods .prototype is not defined
    • Added detection and fix of a V8 ~ Chrome <103 bug of struturedClone that returns null if cloned object contains multiple references to one error
  • 3.22.4 - 2022-05-02
    • Ensured proper .length of polyfilled functions even in compressed code (excepting some ancient engines)
    • Ensured proper .name of polyfilled accessors (excepting some ancient engines)
    • Ensured proper source / ToString conversion of polyfilled accessors
    • Actualized Rhino compat data
    • Refactoring
  • 3.22.3 - 2022-04-28
    • Added a fix for FF99+ Array.prototype.includes broken on sparse arrays
  • 3.22.2 - 2022-04-21
    • Fixed URLSearchParams in IE8- that was broken in the previous release
    • Fixed __lookupGetter__ entries
  • 3.22.1 - 2022-04-19
    • Improved some cases of RegExp flags handling
    • Prevented experimental warning in NodeJS ~ 18.0 on detection fetch API
    • Added NodeJS 18.0 compat data
  • 3.22.0 - 2022-04-15
    • Change Array by copy proposal:
      • Moved to Stage 3, March TC39 meeting
      • Disabled forced replacement and added /actual/ entry points for methods from this proposal
      • Array.prototype.toSpliced throws a TypeError instead of RangeError if the result length is more than MAX_SAFE_INTEGER, proposal-change-array-by-copy/70
    • Added some more atob / btoa fixes:
      • NodeJS <17.9 atob does not ignore spaces, node/42530
      • Actual NodeJS atob does not validate encoding, node/42646
      • FF26- implementation does not properly convert argument to string
      • IE / Edge <16 implementation have wrong arity
    • Added /full/ namespace as the replacement for /features/ since it's more descriptive in context of the rest namespaces (/es//stable//actual//full/)
    • Avoided propagation of removed parts of proposals to upper stages. For example, %TypedArray%.prototype.groupBy was removed from the Array grouping proposal a long time ago. We can't completely remove this method since it's a breaking change. But this proposal has been promoted to stage 3 - so the proposal should be promoted without this method, this method should not be available in /actual/ entries - but it should be available in early-stage entries to avoid breakage.
    • Significant internal refactoring and splitting of modules (but without exposing to public API since it will be a breaking change - it will be exposed in the next major version)
    • Bug fixes:
      • Fixed work of non-standard V8 Error features with wrapped Error constructors, #1061
      • null and undefined allowed as the second argument of structuredClone, #1056
    • Tooling:
      • Stabilized proposals are filtered out from the core-js-compat -> core-js-builder -> core-js-bundle output. That mean that if the output contains, for example, es.object.has-own, the legacy reference to it, esnext.object.has-own, no longer added.
      • Aligned modules filters of core-js-builder and core-js-compat, now it's modules and exclude options
      • Added support of entry points, modules, regexes, and arrays of them to those filters
      • Missed targets option of core-js-compat means that the targets filter just will not be applied, so the result will contain modules required for all possible engines
    • Compat data:
      • .stack property on DOMException marked as supported from Deno 1.15
      • Added Deno 1.21 compat data mapping
      • Added Electron 19.0 and updated 18.0 compat data mapping
      • Added Samsung Internet 17.0 compat data mapping
      • Added Opera Android 68 compat data mapping
  • 3.21.1 - 2022-02-16
    • Added a bugfix for the WebKit Array.prototype.{ groupBy, groupByToMap } implementation
    • core-js-compat targets parser transforms engine names to lower case
    • atob / btoa marked as fixed in NodeJS 17.5
    • Added Electron 18.0 compat data mapping
    • Added Deno 1.20 compat data mapping
from core-js GitHub release notes
Commit messages
Package name: core-js
  • f1b4f76 3.22.5
  • 951124c add links to releases to the changelog
  • c53c1b2 update dependencies
  • ef26f65 ensure proper `.prototype` of polyfills
  • 666631a increase `DEV_NODE_VERSIONS` to `^16.13`
  • 4c64845 first Node 16 LTS was 16.13
  • a946ca4 drop node 14 from ci
  • 8e8f221 replace `lerna` with `npm` workspaces
  • 7a2ebfa a stylistic change
  • e7f3df4 update dependencies
  • 1e69e7e add a fix of a V8 ~ Chrome <103 `struturedClone` bug
  • b3ec24c change the header
  • 6ba79a5 3.22.4
  • 14b2d5e missed nbsp
  • 4c6e83c integrate compat table to browser runner of compat data tests
  • 47f8920 take into account splitted modules in compat data result diff
  • efa5631 reuse the list of ignored in compat data modules, provide some additional data in the source
  • e591ab7 ignore splitted `setImmediate` modules in IE -> Edge compat data mapping
  • 01ea350 improve docs
  • ae61bb3 improve docs
  • 928b853 add some docs
  • c0bf1d6 inherit only ES Deno data, just in case
  • 12b1a02 add some details
  • 318e1db on `zx`, we have `minimist`
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs