This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.23.4 to 3.29.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **17 versions** ahead of your current version.
- The recommended version was released **a month ago**, on 2023-03-13.
Release notes Package name: core-js
ArrayBuffer.prototype.transfer (only in runtimes with native structuredClone with ArrayBuffer transfer support)
ArrayBuffer.prototype.transferToFixedLength (only in runtimes with native structuredClone with ArrayBuffer transfer support)
In backwards, in runtimes with native ArrayBuffer.prototype.transfer, but without proper structuredClone, added ArrayBuffer transfer support to structuredClone polyfill
Improved some cases handling of array-replacer in JSON.stringify symbols handling fix
Fixed many other old JSON.{ parse, stringify } bugs (numbers instead of strings as keys in replacer, handling negative zeroes, spaces, some more handling symbols cases, etc.)
Fixed configurability and ToString conversion of some accessors
Added throwing proper errors on an incorrect context in some ArrayBuffer and DataView methods
Some minor DataView and %TypedArray% polyfills optimizations
Added proper error on the excess number of trailing = in the atob polyfill
Fixed theoretically possible ReDoS vulnerabilities in String.prototype.{ trim, trimEnd, trimRight }, parse(Int|Float), Number, atob, and URL polyfills in some ancient engines
Compat data improvements:
RegExp.prototype.flags marked as fixed from V8 ~ Chrome 111
Accepted only Set-like objects as an argument, not all iterables
Accepted only Sets as this, no @@ species support, and other minor changes
Added /actual/ entries, unconditional forced replacement changed to feature detection
For avoiding breaking changes:
New versions of methods are implemented as new modules and available in new entries or entries where old versions of methods were not available before (like /actual/ namespace)
In entries where they were available before (like /full/ namespace), those methods are available with fallbacks to old semantics (in addition to Set-like, they accept iterable objects). This behavior will be removed from the next major release
According to the documentation, Oculus Browser was renamed to Meta Quest Browser, so oculus target was renamed to quest.
opera_mobile target name is confusing since it contains data for the Chromium-based Android version, but iOS Opera is Safari-based. So opera_mobile target was renamed to opera-android.
android target name is also confusing for someone - that means Android WebView, some think thinks that it's Chrome for Android, but they have some differences. For avoiding confusion, added chrome-android target.
For consistency with two previous cases, added firefox-android target.
For avoiding breaking changes, the oculus and opera_mobile fields are available in the compat data till the next major release.
Fixed the first version in the Chromium-based Edge compat data mapping
{ Map, WeakMap }.prototype.emplace became stricter by the spec draft
Smoothed behavior of some conflicting proposals
Removed some generic behavior (like @@ species pattern) of some .prototype methods from the new collections methods proposal and the Array deduplication proposal that most likely will not be implemented since it contradicts the current TC39 policy
Added pure version of the Number constructor, #1154, #1155, thanks @ trosos
Added set(Timeout|Interval|Immediate) extra arguments fix for Bun 0.3.0- (similarly to IE9-), bun/1633
Fixed handling of sparse arrays in structuredClone, #1156
Fixed a theoretically possible future conflict of polyfills definitions in the pure version
Disabled forced replacing of Array.fromAsync since it's on Stage 3
Avoiding a check of the target in the internal function-uncurry-this helper where it's not required - minor optimization and preventing problems in some broken environments, a workaround of #1141
Added a workaround of a Nashorn bug with Function.prototype.{ call, apply, bind } on string methods, #1128
Updated lists of [Serializable] and [Transferable] objects in the structuredClone polyfill. Mainly, for better error messages if polyfilling of cloning such types is impossible
Compare
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1/settings/integration?pkg=core-js&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.23.4 to 3.29.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **17 versions** ahead of your current version. - The recommended version was released **a month ago**, on 2023-03-13.
Release notes
Package name: core-js
-
3.29.1 - 2023-03-13
- Fixed dependencies of some entries
- Fixed
- Added Opera Android 74 compat data mapping
-
3.29.0 - 2023-02-26
- Added
- Allowed cloning resizable
- Fixed wrong export in
- Compat data improvements:
- Added Deno 1.31 compat data mapping
-
3.28.0 - 2023-02-13
- Change
- Methods:
- Moved to stable ES, January 2023 TC39 meeting
- Added
- Added
- Methods:
- Added
- Built-ins:
- In backwards, in runtimes with native
- Iterator Helpers proposal:
- Splitted into 2 (sync and async) proposals, async version moved back to Stage 2, January 2023 TC39 meeting
- Allowed interleaved mapping in
- Explicit Resource Management Stage 3 and Async Explicit Resource Management Stage 2 proposals:
- Simplified internal behaviour of
- Added
- Methods:
- Fixed Safari
- Improved some cases handling of array-replacer in
- Fixed many other old
- Fixed configurability and
- Added throwing proper errors on an incorrect context in some
- Some minor
- Added proper error on the excess number of trailing
- Fixed theoretically possible ReDoS vulnerabilities in
- Compat data improvements:
- Added Opera Android 73 compat data mapping
- Added TypeScript definitions to
-
3.27.2 - 2023-01-18
- Closing of iterators of
- Some other minor internal changes
- Added one more workaround of a
- Fixed possible
- Used non-standard V8
- Added detection correctness of iteration to
- Compat data improvements:
- Change
- Added Samsung Internet 20 compat data mapping
- Added Quest Browser 25 compat data mapping
- Added React Native 0.71 Hermes compat data
- Added Electron 23 and 24 compat data mapping
- Minor tweaks of minification settings for
- Refactoring, some minor fixes, improvements, optimizations
-
3.27.1 - 2022-12-29
- Fixed a Chakra-based MS Edge (18-) bug that unfreeze (O_o) frozen arrays used as
- Fixing of the previous bug also fixes some cases of
- Fixed dependencies of some entries
-
3.27.0 - 2022-12-25
- Iterator Helpers proposal:
- Built-ins:
- Moved to Stage 3, November 2022 TC39 meeting
- Added
- Built-ins:
- Moved to Stage 3, November 2022 TC39 meeting
- Reimplemented with new semantics:
- Optimized performance (iteration over lowest set)
- Accepted only
- Accepted only
- Added
- For avoiding breaking changes:
- New versions of methods are implemented as new modules and available in new entries or entries where old versions of methods were not available before (like
- In entries where they were available before (like
- Well-Formed Unicode Strings proposal:
- Methods:
- Moved to Stage 3, November 2022 TC39 meeting
- Added
- Explicit resource management Stage 3 and Async explicit resource management Stage 2 proposals:
- Renamed from "
- In addition to already present well-known symbols, added new built-ins:
- Sync version of this proposal moved to Stage 3, November 2022 TC39 meeting
- Added
- Added
- Method
- Throws an error on non-frozen raw templates for avoiding possible breaking changes in the future, proposal-string-dedent/75
- Compat data targets improvements:
- React Native from 0.70 shipped with Hermes as the default engine. However, bundled Hermes versions differ from standalone Hermes releases. So added
- According to the documentation, Oculus Browser was renamed to Meta Quest Browser, so
- For consistency with two previous cases, added
- For avoiding breaking changes, the
- Compat data improvements:
- Change
- Added Deno 1.28 / 1.29 compat data mapping
- Added NodeJS 19.2 compat data mapping
- Added Samsung Internet 19.0 compat data mapping
- Added Quest Browser 24.0 compat data mapping
- Fixed the first version in the Chromium-based Edge compat data mapping
- Smoothed behavior of some conflicting proposals
- Removed some generic behavior (like
- Added pure version of the
- Added
- Fixed handling of sparse arrays in
- Fixed a theoretically possible future conflict of polyfills definitions in the pure version
- Some refactoring and optimization
-
3.26.1 - 2022-11-13
- Disabled forced replacing of
- Avoiding a check of the target in the internal
- V8 will not ship
-
3.26.0 - 2022-10-23 Read more
-
3.25.5 - 2022-10-03
- Fixed regression with an error on reuse of some built-in methods from another realm, #1133
-
3.25.4 - 2022-10-02
- Added a workaround of a Nashorn bug with
- Updated lists of
- Added Electron 22 compat data mapping
-
3.25.3 - 2022-09-25
-
3.25.2 - 2022-09-18
-
3.25.1 - 2022-09-07
-
3.25.0 - 2022-08-24
-
3.24.1 - 2022-07-29
-
3.24.0 - 2022-07-25
-
3.23.5 - 2022-07-17
-
3.23.4 - 2022-07-09
from core-js GitHub release notesToStringconversion / built-ins nature of some accessorsString.prototype.{ isWellFormed, toWellFormed }marked as supported from V8 ~ Chrome 111URLSearchParams.prototype.sizegetter, url/734ArrayBuffers in thestructuredClonepolyfill/(stable|actual|full)/instance/unshiftentries, #1207Setmethods proposal marked as supported from Bun 0.5.7String.prototype.toWellFormedmarked as fixed from Bun 0.5.7I highly recommend reading this: So, what's next?
Arrayby copy proposal:Array.prototype.toReversedArray.prototype.toSortedArray.prototype.toSplicedArray.prototype.with%TypedArray%.prototype.toReversed%TypedArray%.prototype.toSorted%TypedArray%.prototype.withes.namespace modules,/es/and/stable/namespaces entriesJSON.parsesource text access Stage 3 proposalJSON.parsepatched for supportsourceinreviverfunction argumentsJSON.rawJSONJSON.isRawJSONJSON.stringifypatched for supportJSON.rawJSONArrayBuffer.prototype.transferand friends Stage 3 proposal:ArrayBuffer.prototype.detachedArrayBuffer.prototype.transfer(only in runtimes with nativestructuredClonewithArrayBuffertransfer support)ArrayBuffer.prototype.transferToFixedLength(only in runtimes with nativestructuredClonewithArrayBuffertransfer support)ArrayBuffer.prototype.transfer, but without properstructuredClone, addedArrayBuffertransfer support tostructuredClonepolyfillAsyncIteratorhelpers, proposal-iterator-helpers/262InstallErrorCauseremoved fromSuppressedError, January 2023 TC39 meeting, proposal-explicit-resource-management/145{ AsyncDisposableStack, DisposableStack }.prototype.use, proposal-explicit-resource-management/143Symbolpredicates Stage 2 proposalSymbol.isRegisteredSymbol.isWellKnownNumber.rangeStage 1 proposal and method renamed toIterator.rangeFunction.prototype.unThisStage 0 proposal and method renamed toFunction.prototype.demethodizeString.prototype.toWellFormedToStringconversion bugJSON.stringifysymbols handling fixJSON.{ parse, stringify }bugs (numbers instead of strings as keys in replacer, handling negative zeroes, spaces, some more handling symbols cases, etc.)ToStringconversion of some accessorsArrayBufferandDataViewmethodsDataViewand%TypedArray%polyfills optimizations=in theatobpolyfillString.prototype.{ trim, trimEnd, trimRight },parse(Int|Float),Number,atob, andURLpolyfills in some ancient enginesRegExp.prototype.flagsmarked as fixed from V8 ~ Chrome 111core-js-builderSetmethods proposal updates:Set-like objects on early exit, proposal-set-methods/85webpackdev server bug on IE global methods, #1161String.{ raw, cooked }error with empty template arrayError.captureStackTraceinstead of stack parsing in new error classes / wrappers where it's possiblePromise.{ allSettled, any }feature detection, Hermes issueArrayby copy proposal marked as supported from V8 ~ Chrome 110selfmarked as fixed in Deno 1.29.3, deno/17362core-js-bundleWeakMapkeysString.dedentin MS EdgeIteratorIterator.fromIterator.prototype.dropIterator.prototype.everyIterator.prototype.filterIterator.prototype.findIterator.prototype.flatMapIterator.prototype.forEachIterator.prototype.mapIterator.prototype.reduceIterator.prototype.someIterator.prototype.takeIterator.prototype.toArrayIterator.prototype.toAsyncIterator.prototype[@@ toStringTag]AsyncIteratorAsyncIterator.fromAsyncIterator.prototype.dropAsyncIterator.prototype.everyAsyncIterator.prototype.filterAsyncIterator.prototype.findAsyncIterator.prototype.flatMapAsyncIterator.prototype.forEachAsyncIterator.prototype.mapAsyncIterator.prototype.reduceAsyncIterator.prototype.someAsyncIterator.prototype.takeAsyncIterator.prototype.toArrayAsyncIterator.prototype[@@ toStringTag]/actual/entries, unconditional forced replacement disabled for features that survived to Stage 3.fromaccept strings,.flatMapthrows on strings returned from the callback, proposal-iterator-helpers/244, proposal-iterator-helpers/250.fromand.flatMapthrows on non-object iterators, proposal-iterator-helpers/253Setmethods proposal:Set.prototype.intersectionSet.prototype.unionSet.prototype.differenceSet.prototype.symmetricDifferenceSet.prototype.isSubsetOfSet.prototype.isSupersetOfSet.prototype.isDisjointFromSet-like objects as an argument, not all iterablesSets asthis, no@@ speciessupport, and other minor changes/actual/entries, unconditional forced replacement changed to feature detection/actual/namespace)/full/namespace), those methods are available with fallbacks to old semantics (in addition toSet-like, they accept iterable objects). This behavior will be removed from the next major releaseString.prototype.isWellFormedString.prototype.toWellFormed/actual/entries, disabled unconditional forced replacementusingstatement" and splitted into 2 (sync and async) proposalsSymbol.disposeSymbol.asyncDisposeSuppressedErrorDisposableStackDisposableStack.prototype.disposeDisposableStack.prototype.useDisposableStack.prototype.adoptDisposableStack.prototype.deferDisposableStack.prototype.moveDisposableStack.prototype[@@ dispose]AsyncDisposableStackAsyncDisposableStack.prototype.disposeAsyncAsyncDisposableStack.prototype.useAsyncDisposableStack.prototype.adoptAsyncDisposableStack.prototype.deferAsyncDisposableStack.prototype.moveAsyncDisposableStack.prototype[@@ asyncDispose]Iterator.prototype[@@ dispose]AsyncIterator.prototype[@@ asyncDispose]/actual/namespace entries for Stage 3 proposalString.dedentstage 2 proposalString.dedentreact-nativetarget for React Native with bundled Hermes.oculustarget was renamed toquest.opera_mobiletarget name is confusing since it contains data for the Chromium-based Android version, but iOS Opera is Safari-based. Soopera_mobiletarget was renamed toopera-android.androidtarget name is also confusing for someone - that means Android WebView, some think thinks that it's Chrome for Android, but they have some differences. For avoiding confusion, addedchrome-androidtarget.firefox-androidtarget.oculusandopera_mobilefields are available in the compat data till the next major release.Array.fromAsyncmarked as supported from Bun 0.3.0String.prototype.{ isWellFormed, toWellFormed }marked as supported from Bun 0.4.0Arrayby copy proposal marked as supported from Deno 1.27, deno/16429{ Map, WeakMap }.prototype.emplacebecame stricter by the spec draft@@ speciespattern) of some.prototypemethods from the new collections methods proposal and theArraydeduplication proposal that most likely will not be implemented since it contradicts the current TC39 policyNumberconstructor, #1154, #1155, thanks @ trososset(Timeout|Interval|Immediate)extra arguments fix for Bun 0.3.0- (similarly to IE9-), bun/1633structuredClone, #1156Array.fromAsyncsince it's on Stage 3function-uncurry-thishelper where it's not required - minor optimization and preventing problems in some broken environments, a workaround of #1141Array.prototype.{ group, groupToMap }in V8 ~ Chromium 108, proposal-array-grouping/44Function.prototype.{ call, apply, bind }on string methods, #1128[Serializable]and[Transferable]objects in thestructuredClonepolyfill. Mainly, for better error messages if polyfilling of cloning such types is impossibleArray.prototype.{ group, groupToMap }marked as supported from V8 ~ Chromium 108Commit messages
Package name: core-js
- f50b58e 3.29.1
- 8682a18 a month has passed, return the original readme
- 3a6698e update dependencies
- 94dad66 fix dependencies of some entries
- 20899d5 update the changelog
- c256cff fix `/{ actual, full }/array` entries
- 7a69adf update dependencies
- 76f8648 fix dependencies of `/full/instance/replace-all` entry
- 8e5c031 fix `to-set-like` final return -> better error message for obsolete versions of `Set` helpers
- ce955d0 fix `ToString` conversion / built-ins nature of some accessors
- dbc1d6b update dependencies
- 63f9f86 reduce number of intermediate entries for the root entry
- 52ca37e fix dependencies of some entries
- d220771 add Opera Android 74 compat data mapping
- 5c09b8b mark `String.prototype.{ isWellFormed, toWellFormed }` as supported from V8 ~ Chrome 111
- a28c80e drop `{ Iterator, AsyncIterator }.prototype.indexed` compat test since they removed from the proposal
- 344e24a update `publint`
- 71ea97c update dependencies
- 7b1bcff update `playwright-extra`
- 3a04527 add a note
- 2cabf5f add a note
- cd27fd6 update `zx`
- 8c77615 3.29.0
- 615d44e update dependencies
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: