This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.23.4 to 3.25.5.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **9 versions** ahead of your current version.
- The recommended version was released **24 days ago**, on 2022-10-03.
Release notes Package name: core-js
Added a workaround of a Nashorn bug with Function.prototype.{ call, apply, bind } on string methods, #1128
Updated lists of [Serializable] and [Transferable] objects in the structuredClone polyfill. Mainly, for better error messages if polyfilling of cloning such types is impossible
Added some fixes and workarounds of FF30- typed arrays bug that does not properly convert objects to numbers
Added sideEffects field to core-js-purepackage.json for better tree shaking, #1117
Dropped semver dependency from core-js-compat
semver package (ironically) added a breaking change and dropped NodeJS 8 support in the minor 7.1 version, after that semver in core-js-compat was pinned to 7.0 since for avoiding breaking changes it should support NodeJS 8. However, since core-js-compat is usually used with other packages that use semver dependency, it causes multiple duplications of semver in dependencies. So I decided to remove semver dependency and replace it with a couple of simple helpers.
Added Bun 0.1.6-0.1.11 compat data
Added Deno 1.25 compat data mapping
Updated Electron 21 compat data mapping
Some stylistic changes, minor fixes, and improvements
It's optional, legacy, and in some cases (mainly because of developers' mistakes) can cause problems, but some libraries depend on it, and most code can't work without the proper libraries' ecosystem
Only for modern engines where this feature is missed (like Deno), it's not installed in IE10- since here we have no proper way setting of the prototype
Without fixes of early implementations where it's not an accessor since those fixes are impossible
Avoiding unnecessary promise creation and validation result in %WrapForValid(Async)IteratorPrototype%.return, proposal-iterator-helpers/215
Fixed omitting the result of proxing .return in %IteratorHelperPrototype%.return, #1116
Fixed the order creation of properties of iteration result object of some iterators (value should be created before done)
Fixed some cases of Safari < 13 bug - silent on non-writable array .length setting
Fixed ArrayBuffer.length in V8 ~ Chrome 27-
Relaxed condition of re-usage native WeakMap for internal states with multiple core-js copies
Availability cloning of FileList in the structuredClone polyfill extended to some more old engines versions
Some stylistic changes and minor fixes
Throwing a TypeError in core-js-compat / core-js-builder in case of passing invalid module names / filters for avoiding unexpected result, related to #1115
Added missed NodeJS 13.2 to esmodulescore-js-compat / core-js-builder target
Added a workaround of the Bun ~ 0.1.1 bug that define some globals with incorrect property descriptors and that causes a crash of core-js
Added a fix of the FF103+ structuredClone bugs (1774866 (fixed in FF104) and 1777321 (still not fixed)) that now can clone errors, but .stack of the clone is an empty string
Compare
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1/settings/integration?pkg=core-js&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.23.4 to 3.25.5.
 :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **9 versions** ahead of your current version. - The recommended version was released **24 days ago**, on 2022-10-03.
Release notes
Package name: core-js
-
3.25.5 - 2022-10-03
- Fixed regression with an error on reuse of some built-in methods from another realm, #1133
-
3.25.4 - 2022-10-02
- Added a workaround of a Nashorn bug with
- Updated lists of
- Added Electron 22 compat data mapping
-
3.25.3 - 2022-09-25
- Forced polyfilling of
- Fixed existence of
- Added Opera Android 71 compat data mapping
- Some stylistic changes
-
3.25.2 - 2022-09-18
- Considering
- Added Safari 16.0 compat data
- Added iOS Safari 16.0 compat data mapping
- Fixed some ancient iOS Safari versions compat data mapping
-
3.25.1 - 2022-09-07
- Added some fixes and workarounds of FF30- typed arrays bug that does not properly convert objects to numbers
- Added
- Dropped
- Added Bun 0.1.6-0.1.11 compat data
- Added Deno 1.25 compat data mapping
- Updated Electron 21 compat data mapping
- Some stylistic changes, minor fixes, and improvements
-
3.25.0 - 2022-08-24
- Added
- It's optional, legacy, and in some cases (mainly because of developers' mistakes) can cause problems, but some libraries depend on it, and most code can't work without the proper libraries' ecosystem
- Only for modern engines where this feature is missed (like Deno), it's not installed in IE10- since here we have no proper way setting of the prototype
- Without fixes of early implementations where it's not an accessor since those fixes are impossible
- Only for the global version
- Considering
- Avoiding unnecessary promise creation and validation result in
- Fixed omitting the result of proxing
- Fixed the order creation of properties of iteration result object of some iterators (
- Fixed some cases of Safari < 13 bug - silent on non-writable array
- Fixed
- Relaxed condition of re-usage native
- Availability cloning of
- Some stylistic changes and minor fixes
- Throwing a
- Added missed NodeJS 13.2 to
- Added Electron 21 compat data mapping
- Added Oculus Browser 23.0 compat data mapping
-
3.24.1 - 2022-07-29
- NodeJS is ignored in
- Fixed detection of
- Added iOS Safari 15.6 compat data mapping
- Fixed Opera 15 compat data mapping
-
3.24.0 - 2022-07-25
- Recent updates of the iterator helpers proposal, #1101:
- Avoid exposing spec fiction
- Avoid unnecessary promise creation in
- Do not validate value in
- Do not forward the parameter of
- Close inner iterators of
- Throw
- Many other updates and fixes of this proposal
- Polyfill
- Available new targets in
- Bun (
- Hermes (
- Oculus Browser (
- Added Samsung Internet 18.0 compat data mapping
-
3.23.5 - 2022-07-17
- Fixed a typo in the
- Added Opera Android 70 compat data mapping
-
3.23.4 - 2022-07-09
- Added a workaround of the Bun ~ 0.1.1 bug that define some globals with incorrect property descriptors and that causes a crash of
- Added a fix of the FF103+
- Fixed
- Fixed order of errors throwing on iterator helpers
from core-js GitHub release notesFunction.prototype.{ call, apply, bind }on string methods, #1128[Serializable]and[Transferable]objects in thestructuredClonepolyfill. Mainly, for better error messages if polyfilling of cloning such types is impossibleArray.prototype.{ group, groupToMap }marked as supported from V8 ~ Chromium 108Array.prototype.groupToMapin the pure version for returning wrappedMapinstancesArray.prototype.{ findLast, findLastIndex }in/stage/4entrydocument.allas a callable in some missed casessideEffectsfield tocore-js-purepackage.jsonfor better tree shaking, #1117semverdependency fromcore-js-compatsemverpackage (ironically) added a breaking change and dropped NodeJS 8 support in the minor7.1version, after thatsemverincore-js-compatwas pinned to7.0since for avoiding breaking changes it should support NodeJS 8. However, sincecore-js-compatis usually used with other packages that usesemverdependency, it causes multiple duplications ofsemverin dependencies. So I decided to removesemverdependency and replace it with a couple of simple helpers.Object.prototype.__proto__polyfilldocument.allas an object in some missed cases, see ECMAScript Annex B 3.6%WrapForValid(Async)IteratorPrototype%.return, proposal-iterator-helpers/215.returnin%IteratorHelperPrototype%.return, #1116valueshould be created beforedone).lengthsettingArrayBuffer.lengthin V8 ~ Chrome 27-WeakMapfor internal states with multiplecore-jscopiesFileListin thestructuredClonepolyfill extended to some more old engines versionsTypeErrorincore-js-compat/core-js-builderin case of passing invalid module names / filters for avoiding unexpected result, related to #1115esmodulescore-js-compat/core-js-buildertargetIS_BROWSERdetection to avoid a false positive withjsdom, #1110@@ speciessupport inPromisein some old engines{ Array, %TypedArray% }.prototype.{ findLast, findLastIndex }marked as shipped in FF104.asIndexedPairsrenamed to.indexed, proposal-iterator-helpers/183:Iterator.prototype.asIndexedPairs->Iterator.prototype.indexedAsyncIterator.prototype.asIndexedPairs->AsyncIterator.prototype.indexed%AsyncFromSyncIteratorPrototype%inAsyncIterator.fromandIterator.prototype.toAsync, proposal-iterator-helpers/182, proposal-iterator-helpers/202%WrapForValidAsyncIteratorPrototype%.next, proposal-iterator-helpers/197%WrapForValid(Async)IteratorPrototype%.next, proposal-iterator-helpers/197 and proposal-iterator-helpers/205.next/.returnto an underlying iterator by the extended iterator protocol, a part of proposal-iterator-helpers/194.throwmethods removed from all wrappers / helpers prototypes, a part of proposal-iterator-helpers/194{ Iterator, AsyncIterator }.prototype.flatMapproxy iterators on.return, proposal-iterator-helpers/195RangeErroronNaNin{ Iterator, AsyncIterator }.prototype.{ drop, take }, proposal-iterator-helpers/181%TypedArray%.prototype.toSplicedmethod removed from the change array by copy proposal and marked as obsolete incore-js, proposal-change-array-by-copy/88Promisewithunhandledrejectionevent support (browser style) in Deno < 1.24core-js-compat/core-js-builderand added compat data for them:bun), compat data for 0.1.1-0.1.5, #1103hermes), compat data for 0.1-0.11, #1099oculus), compat data mapping for 3.0-22.0, #1098structuredClonefeature detection, #1106core-jsstructuredClonebugs (1774866 (fixed in FF104) and 1777321 (still not fixed)) that now can clone errors, but.stackof the clone is an empty string{ Map, WeakMap }.prototype.emplacelogic, #1102Commit messages
Package name: core-js
- 4a8b1f7 3.25.5
- 1ad3e1a fix regression with an error on reuse of some built-in methods from another realm, close #1133
- d59e440 3.25.4
- d76041c update lists of `[Serializable]` and `[Transferable]` objects in the `structuredClone` polyfill
- fd7812a some stylistic changes, improve a note
- afcc148 update dependencies
- 14364db add Electron 22 compat data mapping
- 3172ef6 Merge pull request #1131 from AprilArcus/april/1130
- 8bd8508 Fix more Nashorn problems
- 44fe613 fix `no-unused-vars` setting
- 9307fb7 Merge pull request #1129 from AprilArcus/april/1128
- 775f6ba some fixes
- 7451b1d Fix uncurryThis on Nashorn
- 27b5630 add a workaround of a Nashorn bug with `Function.prototype.{ call, bind }`, close #1128
- 7af3ced fix a link
- 325cd4e update dependencies
- 6adfd9a update a link
- ce292cb mark `Array.prototype.{ group, groupToMap }` marked as supported from V8 ~ Chromium 108
- 12509bd 3.25.3
- 3051ab6 Merge pull request #1125 from zloirock/eslint-flat
- 5a6465c remove `no-loss-of-precision` since it works not as expected in some cases
- b3e4874 some stylistic changes
- 3039471 disable `unicorn/prefer-code-point` as useless for `core-js` case
- ad96d14 update `eslint`, enable `logical-assignment-operators` rule
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: