This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.23.4 to 3.30.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **19 versions** ahead of your current version.
- The recommended version was released **21 days ago**, on 2023-04-13.
Release notes Package name: core-js
ArrayBuffer.prototype.transfer (only in runtimes with native structuredClone with ArrayBuffer transfer support)
ArrayBuffer.prototype.transferToFixedLength (only in runtimes with native structuredClone with ArrayBuffer transfer support)
In backwards, in runtimes with native ArrayBuffer.prototype.transfer, but without proper structuredClone, added ArrayBuffer transfer support to structuredClone polyfill
Improved some cases handling of array-replacer in JSON.stringify symbols handling fix
Fixed many other old JSON.{ parse, stringify } bugs (numbers instead of strings as keys in replacer, handling negative zeroes, spaces, some more handling symbols cases, etc.)
Fixed configurability and ToString conversion of some accessors
Added throwing proper errors on an incorrect context in some ArrayBuffer and DataView methods
Some minor DataView and %TypedArray% polyfills optimizations
Added proper error on the excess number of trailing = in the atob polyfill
Fixed theoretically possible ReDoS vulnerabilities in String.prototype.{ trim, trimEnd, trimRight }, parse(Int|Float), Number, atob, and URL polyfills in some ancient engines
Compat data improvements:
RegExp.prototype.flags marked as fixed from V8 ~ Chrome 111
Disabled forced replacing of Array.fromAsync since it's on Stage 3
Avoiding a check of the target in the internal function-uncurry-this helper where it's not required - minor optimization and preventing problems in some broken environments, a workaround of #1141
Compare
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1/settings/integration?pkg=core-js&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.23.4 to 3.30.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **19 versions** ahead of your current version. - The recommended version was released **21 days ago**, on 2023-04-13.
Release notes
Package name: core-js
-
3.30.1 - 2023-04-13
- Added a fix for a NodeJS 19.9.0
- Compat data improvements:
-
3.30.0 - 2023-04-03
- Added
- Removed sort from
- Iterator Helpers proposals (sync, async):
- Validate arguments before opening iterator, March 2023 TC39 meeting, proposal-iterator-helpers/265
- Explicit Resource Management proposals (sync, async):
- Some simplifications like proposal-explicit-resource-management/150
- Moved to Stage 2, March 2023 TC39 meeting
- Decorator Metadata proposal:
- Returned to usage
- Compat data improvements:
- Added Safari 16.4 compat data
- Added Deno 1.32 compat data mapping
- Added Electron 25 and updated 24 compat data mapping
- Added Samsung Internet 21 compat data mapping
- Added Quest Browser 26 compat data mapping
- Updated Opera Android 74 compat data
-
3.29.1 - 2023-03-13
- Fixed dependencies of some entries
- Fixed
- Added Opera Android 74 compat data mapping
-
3.29.0 - 2023-02-26
- Added
- Allowed cloning resizable
- Fixed wrong export in
- Compat data improvements:
- Added Deno 1.31 compat data mapping
-
3.28.0 - 2023-02-13
- Change
- Methods:
- Moved to stable ES, January 2023 TC39 meeting
- Added
- Added
- Methods:
- Added
- Built-ins:
- In backwards, in runtimes with native
- Iterator Helpers proposal:
- Splitted into 2 (sync and async) proposals, async version moved back to Stage 2, January 2023 TC39 meeting
- Allowed interleaved mapping in
- Explicit Resource Management Stage 3 and Async Explicit Resource Management Stage 2 proposals:
- Simplified internal behaviour of
- Added
- Methods:
- Fixed Safari
- Improved some cases handling of array-replacer in
- Fixed many other old
- Fixed configurability and
- Added throwing proper errors on an incorrect context in some
- Some minor
- Added proper error on the excess number of trailing
- Fixed theoretically possible ReDoS vulnerabilities in
- Compat data improvements:
- Added Opera Android 73 compat data mapping
- Added TypeScript definitions to
-
3.27.2 - 2023-01-18
- Closing of iterators of
- Some other minor internal changes
- Added one more workaround of a
- Fixed possible
- Used non-standard V8
- Added detection correctness of iteration to
- Compat data improvements:
- Change
- Added Samsung Internet 20 compat data mapping
- Added Quest Browser 25 compat data mapping
- Added React Native 0.71 Hermes compat data
- Added Electron 23 and 24 compat data mapping
- Minor tweaks of minification settings for
- Refactoring, some minor fixes, improvements, optimizations
-
3.27.1 - 2022-12-29
- Fixed a Chakra-based MS Edge (18-) bug that unfreeze (O_o) frozen arrays used as
- Fixing of the previous bug also fixes some cases of
- Fixed dependencies of some entries
-
3.27.0 - 2022-12-25 Read more
-
3.26.1 - 2022-11-13
- Disabled forced replacing of
- Avoiding a check of the target in the internal
- V8 will not ship
-
3.26.0 - 2022-10-23
- Moved to Stage 3, September TC39 meeting
- Avoid observable side effects of
- Added well-formed unicode strings stage 2 proposal:
- Recent updates of the iterator helpers proposal:
- Added a counter parameter to helpers, proposal-iterator-helpers/211
- Don't await non-objects returned from functions passed to
- Early exit on broken
- Added
- Added
- Added
- Added NodeJS 19.0 compat data
- Added Deno 1.26 and 1.27 compat data
- Added Opera Android 72 compat data mapping
- Updated Electron 22 compat data mapping
-
3.25.5 - 2022-10-03
-
3.25.4 - 2022-10-02
-
3.25.3 - 2022-09-25
-
3.25.2 - 2022-09-18
-
3.25.1 - 2022-09-07
-
3.25.0 - 2022-08-24
-
3.24.1 - 2022-07-29
-
3.24.0 - 2022-07-25
-
3.23.5 - 2022-07-17
-
3.23.4 - 2022-07-09
from core-js GitHub release notesURL.canParsebugJSON.parsesource text access proposal features marked as supported from V8 ~ Chrome 114ArrayBuffer.prototype.transferand friends proposal features marked as supported from V8 ~ Chrome 114URLSearchParams.prototype.sizemarked as supported from V8 ~ Chrome 113URL.canParsemethod, url/763Setmethods proposal:Set.prototype.intersection, March 2023 TC39 meeting, proposal-set-methods/94(Async)DisposableStack.prototype.movemarks the original stack as disposed, #1226Iterator.rangeproposal:Symbol.metadata, March 2023 TC39 meeting, proposal-decorator-metadata/12URLSearchParams.prototype.sizemarked as supported from FF112, NodeJS 19.8 and Deno 1.32ToStringconversion / built-ins nature of some accessorsString.prototype.{ isWellFormed, toWellFormed }marked as supported from V8 ~ Chrome 111URLSearchParams.prototype.sizegetter, url/734ArrayBuffers in thestructuredClonepolyfill/(stable|actual|full)/instance/unshiftentries, #1207Setmethods proposal marked as supported from Bun 0.5.7String.prototype.toWellFormedmarked as fixed from Bun 0.5.7I highly recommend reading this: So, what's next?
Arrayby copy proposal:Array.prototype.toReversedArray.prototype.toSortedArray.prototype.toSplicedArray.prototype.with%TypedArray%.prototype.toReversed%TypedArray%.prototype.toSorted%TypedArray%.prototype.withes.namespace modules,/es/and/stable/namespaces entriesJSON.parsesource text access Stage 3 proposalJSON.parsepatched for supportsourceinreviverfunction argumentsJSON.rawJSONJSON.isRawJSONJSON.stringifypatched for supportJSON.rawJSONArrayBuffer.prototype.transferand friends Stage 3 proposal:ArrayBuffer.prototype.detachedArrayBuffer.prototype.transfer(only in runtimes with nativestructuredClonewithArrayBuffertransfer support)ArrayBuffer.prototype.transferToFixedLength(only in runtimes with nativestructuredClonewithArrayBuffertransfer support)ArrayBuffer.prototype.transfer, but without properstructuredClone, addedArrayBuffertransfer support tostructuredClonepolyfillAsyncIteratorhelpers, proposal-iterator-helpers/262InstallErrorCauseremoved fromSuppressedError, January 2023 TC39 meeting, proposal-explicit-resource-management/145{ AsyncDisposableStack, DisposableStack }.prototype.use, proposal-explicit-resource-management/143Symbolpredicates Stage 2 proposalSymbol.isRegisteredSymbol.isWellKnownNumber.rangeStage 1 proposal and method renamed toIterator.rangeFunction.prototype.unThisStage 0 proposal and method renamed toFunction.prototype.demethodizeString.prototype.toWellFormedToStringconversion bugJSON.stringifysymbols handling fixJSON.{ parse, stringify }bugs (numbers instead of strings as keys in replacer, handling negative zeroes, spaces, some more handling symbols cases, etc.)ToStringconversion of some accessorsArrayBufferandDataViewmethodsDataViewand%TypedArray%polyfills optimizations=in theatobpolyfillString.prototype.{ trim, trimEnd, trimRight },parse(Int|Float),Number,atob, andURLpolyfills in some ancient enginesRegExp.prototype.flagsmarked as fixed from V8 ~ Chrome 111core-js-builderSetmethods proposal updates:Set-like objects on early exit, proposal-set-methods/85webpackdev server bug on IE global methods, #1161String.{ raw, cooked }error with empty template arrayError.captureStackTraceinstead of stack parsing in new error classes / wrappers where it's possiblePromise.{ allSettled, any }feature detection, Hermes issueArrayby copy proposal marked as supported from V8 ~ Chrome 110selfmarked as fixed in Deno 1.29.3, deno/17362core-js-bundleWeakMapkeysString.dedentin MS EdgeArray.fromAsyncsince it's on Stage 3function-uncurry-thishelper where it's not required - minor optimization and preventing problems in some broken environments, a workaround of #1141Array.prototype.{ group, groupToMap }in V8 ~ Chromium 108, proposal-array-grouping/44Array.fromAsyncproposal:%Array.prototype.values%usage in array-like branch, proposal-array-from-async/30String.prototype.isWellFormedString.prototype.toWellFormedAsyncIteratorhelpers, proposal-iterator-helpers/239{ Iterator, AsyncIterator }.prototype.flatMapsupports returning both - iterables and iterators, proposal-iterator-helpers/233.nextin missed cases of{ Iterator, AsyncIterator }.from, proposal-iterator-helpers/232selfpolyfill as a part of The Minimum Common Web Platform API, specification, #1118inverseoption tocore-js-compat, #1119formatoption tocore-js-builder, #1120Commit messages
Package name: core-js
- 46e2a5c 3.30.1
- 8648ddc update dependencies
- 023931e update dependencies
- 1029176 add a fix for a NodeJS 19.9.0 `URL.canParse` bug
- e0de0dc update dependencies
- 2bfd0d6 update dependencies
- 0cad738 update Deno bundle README
- cfc5568 update dependencies
- 16a8957 update dependencies
- e4433a8 update dependencies
- cec682e `URLSearchParams.prototype.size` marked as supported from V8 ~ Chrome 113
- 07b5a77 `ArrayBuffer.prototype.transfer` and friends proposal features marked as supported from V8 ~ Chrome 114
- 193d95f `JSON.parse` source text access proposal features marked as supported from V8 ~ Chrome 114
- 280680b 3.30.0
- 56a31ae stylistic change
- 32fcbab add `URL.canParse` method
- 49b1884 update `eslint-plugin-es-x`
- 164e5b5 add missed test
- 7258be5 add Samsung Internet 21 compat data mapping
- d94e244 update Electron 25 compat data mapping
- 3d6df36 fix some more tests
- f6a7f55 fix arguments in tests
- 1a3d541 validate arguments before opening iterator in iterator helpers
- 9509bdd update dependencies
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: