This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.23.4 to 3.31.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **22 versions** ahead of your current version.
- The recommended version was released **21 days ago**, on 2023-07-06.
Release notes Package name: core-js
Array.prototype.{ group, groupToMap } marked as no longer supported in WebKit runtimes because of the mentioned above web compat issue. For example, it's disabled from Bun 0.6.2
ArrayBuffer.prototype.transfer (only in runtimes with native structuredClone with ArrayBuffer transfer support)
ArrayBuffer.prototype.transferToFixedLength (only in runtimes with native structuredClone with ArrayBuffer transfer support)
In backwards, in runtimes with native ArrayBuffer.prototype.transfer, but without proper structuredClone, added ArrayBuffer transfer support to structuredClone polyfill
Improved some cases handling of array-replacer in JSON.stringify symbols handling fix
Fixed many other old JSON.{ parse, stringify } bugs (numbers instead of strings as keys in replacer, handling negative zeroes, spaces, some more handling symbols cases, etc.)
Fixed configurability and ToString conversion of some accessors
Added throwing proper errors on an incorrect context in some ArrayBuffer and DataView methods
Some minor DataView and %TypedArray% polyfills optimizations
Added proper error on the excess number of trailing = in the atob polyfill
Fixed theoretically possible ReDoS vulnerabilities in String.prototype.{ trim, trimEnd, trimRight }, parse(Int|Float), Number, atob, and URL polyfills in some ancient engines
Compat data improvements:
RegExp.prototype.flags marked as fixed from V8 ~ Chrome 111
Compare
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/blacklight/project/96bfd125-5816-4d9e-83c6-94d1569ab0f1/settings/integration?pkg=core-js&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.23.4 to 3.31.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **22 versions** ahead of your current version. - The recommended version was released **21 days ago**, on 2023-07-06.
Release notes
Package name: core-js
-
3.31.1 - 2023-07-06
- Fixed a
- Fixed the order of arguments validation in
- Allowed cloning of
- Compat data improvements:
- New
- Added Deno 1.35 compat data mapping
- Added Quest Browser 28 compat data mapping
- Added missing NodeJS 12.16-12.22 compat data mapping
- Updated Opera Android 76 compat data mapping
-
3.31.0 - 2023-06-11
- Well-formed unicode strings proposal:
- Methods:
- Moved to stable ES, May 2023 TC39 meeting
- Added
- Because of the web compat issue, moved from prototype to static methods. Added:
- Demoted to stage 2
- Decorator Metadata proposal, May 2023 TC39 meeting updates:
- Moved to stage 3
- Added
- Added
- Iterator Helpers stage 3 proposal:
- Changed
- Removed
- Added
- The methods renamed to end with
- Added
- Fixed some cases of increasing buffer size in
- Fixed awaiting async
- Fixed
- Added a workaround in
- Added TypeScript definitions to
- Compat data improvements:
- Methods from the change
- Added Deno 1.34 compat data mapping
- Added Electron 26 compat data mapping
- Added Samsung Internet 22 compat data mapping
- Added Opera Android 75 and 76 compat data mapping
- Added Quest Browser 27 compat data mapping
-
3.30.2 - 2023-05-06
- Added a fix for a NodeJS 20.0.0 bug with cloning
- Added protection from Terser unsafe
- Added a workaround for getting proper global object in Figma plugins, #1231
- Compat data improvements:
- Added NodeJS 20.0 compat data mapping
- Added Deno 1.33 compat data mapping
-
3.30.1 - 2023-04-13
- Added a fix for a NodeJS 19.9.0
- Compat data improvements:
-
3.30.0 - 2023-04-03
- Added
- Removed sort from
- Iterator Helpers proposals (sync, async):
- Validate arguments before opening iterator, March 2023 TC39 meeting, proposal-iterator-helpers/265
- Explicit Resource Management proposals (sync, async):
- Some simplifications like proposal-explicit-resource-management/150
- Moved to Stage 2, March 2023 TC39 meeting
- Decorator Metadata proposal:
- Returned to usage
- Compat data improvements:
- Added Safari 16.4 compat data
- Added Deno 1.32 compat data mapping
- Added Electron 25 and updated 24 compat data mapping
- Added Samsung Internet 21 compat data mapping
- Added Quest Browser 26 compat data mapping
- Updated Opera Android 74 compat data
-
3.29.1 - 2023-03-13
- Fixed dependencies of some entries
- Fixed
- Added Opera Android 74 compat data mapping
-
3.29.0 - 2023-02-26
- Added
- Allowed cloning resizable
- Fixed wrong export in
- Compat data improvements:
- Added Deno 1.31 compat data mapping
-
3.28.0 - 2023-02-13
- Change
- Methods:
- Moved to stable ES, January 2023 TC39 meeting
- Added
- Added
- Methods:
- Added
- Built-ins:
- In backwards, in runtimes with native
- Iterator Helpers proposal:
- Splitted into 2 (sync and async) proposals, async version moved back to Stage 2, January 2023 TC39 meeting
- Allowed interleaved mapping in
- Explicit Resource Management Stage 3 and Async Explicit Resource Management Stage 2 proposals:
- Simplified internal behaviour of
- Added
- Methods:
- Fixed Safari
- Improved some cases handling of array-replacer in
- Fixed many other old
- Fixed configurability and
- Added throwing proper errors on an incorrect context in some
- Some minor
- Added proper error on the excess number of trailing
- Fixed theoretically possible ReDoS vulnerabilities in
- Compat data improvements:
- Added Opera Android 73 compat data mapping
- Added TypeScript definitions to
-
3.27.2 - 2023-01-18
- Closing of iterators of
- Some other minor internal changes
- Added one more workaround of a
- Fixed possible
- Used non-standard V8
- Added detection correctness of iteration to
- Compat data improvements:
- Change
- Added Samsung Internet 20 compat data mapping
- Added Quest Browser 25 compat data mapping
- Added React Native 0.71 Hermes compat data
- Added Electron 23 and 24 compat data mapping
- Minor tweaks of minification settings for
- Refactoring, some minor fixes, improvements, optimizations
-
3.27.1 - 2022-12-29
- Fixed a Chakra-based MS Edge (18-) bug that unfreeze (O_o) frozen arrays used as
- Fixing of the previous bug also fixes some cases of
- Fixed dependencies of some entries
-
3.27.0 - 2022-12-25
-
3.26.1 - 2022-11-13
-
3.26.0 - 2022-10-23
-
3.25.5 - 2022-10-03
-
3.25.4 - 2022-10-02
-
3.25.3 - 2022-09-25
-
3.25.2 - 2022-09-18
-
3.25.1 - 2022-09-07
-
3.25.0 - 2022-08-24
-
3.24.1 - 2022-07-29
-
3.24.0 - 2022-07-25
-
3.23.5 - 2022-07-17
-
3.23.4 - 2022-07-09
from core-js GitHub release notesstructuredClonebug with cloning views of transferred buffers, #1265DataViewmethodsFloat16ArrayinstructuredCloneSetmethods proposal marked as supported from Safari 17.0URLfeatures:URL.canParse,URLSearchParams.prototype.sizeandvalueargument ofURLSearchParams.prototype.{ has, delete }marked as supported from Safari 17.0valueargument ofURLSearchParams.prototype.{ has, delete }marked as supported from Deno 1.35AggregateErrorand well-formedJSON.stringifymarked as supported React Native 0.72 HermesString.prototype.isWellFormedmethodString.prototype.toWellFormedmethodes.namespace modules,/es/and/stable/namespaces entriesArraygrouping proposal, May 2023 TC39 meeting updates:Object.groupBymethodMap.groupBymethod (with the actual semantic - with a minor difference it was present in the collections methods stage 1 proposal)Function.prototype[Symbol.metadata](=== null)/actual/entriesSymbol.iteratorfallback from callable check toundefined/nullcheck, May 2023 TC39 meeting, proposal-iterator-helpers/272IsCallablecheck onNextMethod, deferring errors toCallsite, May 2023 TC39 meeting, proposal-iterator-helpers/274Promise.withResolversstage 2 proposal:Promise.withResolversmethodSymbolpredicates stage 2 proposal:Symbol, May 2023 TC39 meeting:Symbol.isRegistered->Symbol.isRegisteredSymbolmethodSymbol.isWellKnown->Symbol.isWellKnownSymbolmethodvalueargument ofURLSearchParams.prototype.{ has, delete }, url/735ArrayBuffer.prototype.{ transfer, transferToFixedLength }polyfillsAsyncDisposableStack.prototype.adoptcallback, #1258URLSearchParams#sizein ES3 engines (IE8-)Object.{ entries, values }for some IE versions bug with invisible integer keys onnull-prototype objectscore-js-compat, #1235, thanks @ susnuxSet.prototype.differencethat was missed in Bun because of a bug added in 0.6.0Array.prototype.{ group, groupToMap }marked as no longer supported in WebKit runtimes because of the mentioned above web compat issue. For example, it's disabled from Bun 0.6.2Arrayby copy proposal marked as supported from FF115Array.fromAsyncmarked as supported from FF115URL.canParsemarked as supported from FF115valueargument ofURLSearchParams.prototype.{ has, delete }marked as supported from NodeJS 20.2.0 and FF115FileviastructuredCloneStringoptimization, #1242URL.canParsemarked as supported (fixed) from NodeJS 20.1.0 and Deno 1.33.2URL.canParsebugJSON.parsesource text access proposal features marked as supported from V8 ~ Chrome 114ArrayBuffer.prototype.transferand friends proposal features marked as supported from V8 ~ Chrome 114URLSearchParams.prototype.sizemarked as supported from V8 ~ Chrome 113URL.canParsemethod, url/763Setmethods proposal:Set.prototype.intersection, March 2023 TC39 meeting, proposal-set-methods/94(Async)DisposableStack.prototype.movemarks the original stack as disposed, #1226Iterator.rangeproposal:Symbol.metadata, March 2023 TC39 meeting, proposal-decorator-metadata/12URLSearchParams.prototype.sizemarked as supported from FF112, NodeJS 19.8 and Deno 1.32ToStringconversion / built-ins nature of some accessorsString.prototype.{ isWellFormed, toWellFormed }marked as supported from V8 ~ Chrome 111URLSearchParams.prototype.sizegetter, url/734ArrayBuffers in thestructuredClonepolyfill/(stable|actual|full)/instance/unshiftentries, #1207Setmethods proposal marked as supported from Bun 0.5.7String.prototype.toWellFormedmarked as fixed from Bun 0.5.7I highly recommend reading this: So, what's next?
Arrayby copy proposal:Array.prototype.toReversedArray.prototype.toSortedArray.prototype.toSplicedArray.prototype.with%TypedArray%.prototype.toReversed%TypedArray%.prototype.toSorted%TypedArray%.prototype.withes.namespace modules,/es/and/stable/namespaces entriesJSON.parsesource text access Stage 3 proposalJSON.parsepatched for supportsourceinreviverfunction argumentsJSON.rawJSONJSON.isRawJSONJSON.stringifypatched for supportJSON.rawJSONArrayBuffer.prototype.transferand friends Stage 3 proposal:ArrayBuffer.prototype.detachedArrayBuffer.prototype.transfer(only in runtimes with nativestructuredClonewithArrayBuffertransfer support)ArrayBuffer.prototype.transferToFixedLength(only in runtimes with nativestructuredClonewithArrayBuffertransfer support)ArrayBuffer.prototype.transfer, but without properstructuredClone, addedArrayBuffertransfer support tostructuredClonepolyfillAsyncIteratorhelpers, proposal-iterator-helpers/262InstallErrorCauseremoved fromSuppressedError, January 2023 TC39 meeting, proposal-explicit-resource-management/145{ AsyncDisposableStack, DisposableStack }.prototype.use, proposal-explicit-resource-management/143Symbolpredicates Stage 2 proposalSymbol.isRegisteredSymbol.isWellKnownNumber.rangeStage 1 proposal and method renamed toIterator.rangeFunction.prototype.unThisStage 0 proposal and method renamed toFunction.prototype.demethodizeString.prototype.toWellFormedToStringconversion bugJSON.stringifysymbols handling fixJSON.{ parse, stringify }bugs (numbers instead of strings as keys in replacer, handling negative zeroes, spaces, some more handling symbols cases, etc.)ToStringconversion of some accessorsArrayBufferandDataViewmethodsDataViewand%TypedArray%polyfills optimizations=in theatobpolyfillString.prototype.{ trim, trimEnd, trimRight },parse(Int|Float),Number,atob, andURLpolyfills in some ancient enginesRegExp.prototype.flagsmarked as fixed from V8 ~ Chrome 111core-js-builderSetmethods proposal updates:Set-like objects on early exit, proposal-set-methods/85webpackdev server bug on IE global methods, #1161String.{ raw, cooked }error with empty template arrayError.captureStackTraceinstead of stack parsing in new error classes / wrappers where it's possiblePromise.{ allSettled, any }feature detection, Hermes issueArrayby copy proposal marked as supported from V8 ~ Chrome 110selfmarked as fixed in Deno 1.29.3, deno/17362core-js-bundleWeakMapkeysString.dedentin MS EdgeCommit messages
Package name: core-js
- 9376c6f 3.31.1
- 80b2e80 add Deno 1.35 compat data mapping
- 7cb301a update dependencies
- f2b351a mark `value` argument of `URLSearchParams.prototype.{ has, delete }` as supported from Deno 1.35
- c013afd update dependencies
- bb6571b some fixes and optimizations
- 1518714 update dependencies
- 22895f6 fix a `structuredClone` bug with cloning views of transferred buffers, close #1265
- 60d91f8 add a link
- c00e155 update dependencies
- 2adeff0 update Opera Android 76 compat data mapping
- 74eaa4b add Quest Browser 28 compat data mapping
- bf03b9f update dependencies
- 1893217 update dependencies
- 74716af add missing NodeJS 12.16-12.22 compat data mapping
- 6f48483 update dependencies
- 0dac018 update dependencies
- 116be7f update dependencies
- 8b8430c update some links
- 667a372 drop node 19 from ci
- 3c8a37a update dependencies
- 4f96175 add React Native 0.72 Hermes compat data
- 285f4d2 update dependencies
- 0b771f8 add some asserts
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: