udsm-dhis2-lab / ngx-dhis2-validation-rule-filter

Library for filtering the validation rule and validation rule group in the DHIS2 Platform
GNU Lesser General Public License v3.0
0 stars 1 forks source link

chore(deps): bump core-js from 3.2.1 to 3.13.0 #925

Closed dependabot-preview[bot] closed 3 years ago

dependabot-preview[bot] commented 3 years ago

Bumps core-js from 3.2.1 to 3.13.0.

Changelog

Sourced from core-js's changelog.

3.13.0 - 2021.05.26
3.12.1 - 2021.05.09
  • Fixed some cases of Function#toString with multiple core-js instances
  • Fixed some possible String#split polyfill problems in V8 5.1
3.12.0 - 2021.05.06
3.11.3 - 2021.05.05
  • Native promise-based APIs Promise#{ catch, finally } returns polyfilled Promise instances when it's required
3.11.2 - 2021.05.03
  • Added a workaround of WebKit ~ iOS 10.3 Safari Promise bug, #932
  • Promise#then of incorrect native Promise implementations with correct subclassing no longer wrapped
  • Changed the order of Promise feature detection, removed unhandled rejection tracking check in non-browser non-node platforms
3.11.1 - 2021.04.28
  • Made instanceof Promise and .constructor === Promise work with polyfilled Promise for all native promise-based APIs
  • Added a workaround for some buggy V8 versions ~4.5 related to fixing of %TypedArray% static methods, #564
3.11.0 - 2021.04.22
3.10.2 - 2021.04.19
  • URL and URLSearchParams marked as supported from Safari 14.0
  • Polyfilled built-in constructors protected from calling on instances
3.10.1 - 2021.04.08
  • Prevented possible RegExp#split problems in old engines, #751, #919
  • Detection of Safari 10 string padding bug extended to some Safari-based browsers
3.10.0 - 2021.03.31
  • Array find from last proposal moved to the stage 2, March TC39 meeting
  • Prevented possible RegExp#exec problems in some old engines, #920
  • Updated compat data mapping:
    • NodeJS up to 16.0
    • Electron up to 13.0
    • Samsung Internet up to 14.0
    • Opera Android up to 62
    • The rest automatically
3.9.1 - 2021.03.01
  • Added a workaround for Chrome 38-40 bug which does not allow to inherit symbols (incl. well-known) from DOM collections prototypes to instances, #37
  • Used NumericRangeIterator as toStringTag instead of RangeIterator in { Number, BigInt }.range iterator, per this PR

... (truncated)

Commits
  • f4307bc 3.13.0
  • c412ee2 move accessible Object#hasOwnProperty (Object.hasOwn) proposal to the sta...
  • 8752e69 3.12.1
  • 3eb4159 fix some possible String#split polyfill problems in V8 5.1
  • 1789d3e fix some cases of Function#toString with multiple core-js instances
  • c7170fb update eslint-plugin-regexp
  • 1aadb7b 3.12.0
  • 9f8ff89 fix regression of V8 ~ Node 0.12 Sting(Symbol()) bug, close #933
  • b3afb28 add Symbol.matcher
  • 98e421f add Symbol.metadata
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by zloirock, a new releaser for core-js since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)
guardrails[bot] commented 3 years ago

:warning: We detected 17 security issues in this pull request:

Vulnerable Libraries (17)
Severity | Details ----- | -------- Medium | [acorn@6.3.0](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>5.7.3 || >6.4.0 || >7.1.0` Medium | [browserslist@4.6.6](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>4.16.4` High | [dns-packet@1.3.1](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=5.2.2` High | [dot-prop@4.2.0](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=4.2.1 || >=5.1.1` High | [elliptic@6.5.0](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>6.5.3` Critical | [handlebars@4.1.2](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>4.7.6` Medium | [hosted-git-info@2.8.4](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=2.8.9 || >=3.0.8` High | [http-proxy@1.17.0](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=1.18.1` High | [https-proxy-agent@2.2.1](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=2.2.3` High | [merge@1.2.1](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=2.1.1` High | [node-forge@0.7.5](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>0.9.2` High | [serialize-javascript@1.9.0](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>3.0.0` Medium | [ssri@5.3.0](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>6.0.1 || >7.1.0 || 8.0.0` High | [tree-kill@1.2.1](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=1.2.2` High | [url-parse@1.4.7](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=1.5.0` Medium | [websocket-extensions@0.1.3](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=0.1.4` High | [y18n@4.0.0](https://github.com/hisptz/ngx-dhis2-validation-rule-filter/blob/ef412d77978fe3dcc9a88ac4ca5d4eb8c33428fc/package.json) upgrade to `>=5.0.5` More info on how to fix Vulnerable Libraries in [JavaScript](https://docs.guardrails.io/docs/en/vulnerabilities/javascript/using_vulnerable_libraries.html?utm_source=ghpr).

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

dependabot-preview[bot] commented 3 years ago

Superseded by #931.