[Snyk] Upgrade core-js from 3.20.3 to 3.22.3

[snyk-bot]

Snyk has created this PR to upgrade core-js from 3.20.3 to 3.22.3.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 24 days ago, on 2022-04-28.

Release notes

Package name: core-js

• 3.22.3 - 2022-04-28
  
  • Added a fix for FF99+ Array.prototype.includes broken on sparse arrays
• 3.22.2 - 2022-04-21
  
  • Fixed URLSearchParams in IE8- that was broken in the previous release
  • Fixed __lookupGetter__ entries
• 3.22.1 - 2022-04-19
  
  • Improved some cases of RegExp flags handling
  • Prevented experimental warning in NodeJS ~ 18.0 on detection fetch API
  • Added NodeJS 18.0 compat data
• 3.22.0 - 2022-04-15
  
  • Change Array by copy proposal:
    • Moved to Stage 3, March TC39 meeting
    • Disabled forced replacement and added /actual/ entry points for methods from this proposal
    • Array.prototype.toSpliced throws a TypeError instead of RangeError if the result length is more than MAX_SAFE_INTEGER, proposal-change-array-by-copy/70
  • Added some more atob / btoa fixes:
    • NodeJS <17.9 atob does not ignore spaces, node/42530
    • Actual NodeJS atob does not validate encoding, node/42646
    • FF26- implementation does not properly convert argument to string
    • IE / Edge <16 implementation have wrong arity
  • Added /full/ namespace as the replacement for /features/ since it's more descriptive in context of the rest namespaces (/es/ ⊆ /stable/ ⊆ /actual/ ⊆ /full/)
  • Avoided propagation of removed parts of proposals to upper stages. For example, %TypedArray%.prototype.groupBy was removed from the Array grouping proposal a long time ago. We can't completely remove this method since it's a breaking change. But this proposal has been promoted to stage 3 - so the proposal should be promoted without this method, this method should not be available in /actual/ entries - but it should be available in early-stage entries to avoid breakage.
  • Significant internal refactoring and splitting of modules (but without exposing to public API since it will be a breaking change - it will be exposed in the next major version)
  • Bug fixes:
    • Fixed work of non-standard V8 Error features with wrapped Error constructors, #1061
    • null and undefined allowed as the second argument of structuredClone, #1056
  • Tooling:
    • Stabilized proposals are filtered out from the core-js-compat -> core-js-builder -> core-js-bundle output. That mean that if the output contains, for example, es.object.has-own, the legacy reference to it, esnext.object.has-own, no longer added.
    • Aligned modules filters of core-js-builder and core-js-compat, now it's modules and exclude options
    • Added support of entry points, modules, regexes, and arrays of them to those filters
    • Missed targets option of core-js-compat means that the targets filter just will not be applied, so the result will contain modules required for all possible engines
  • Compat data:
    • .stack property on DOMException marked as supported from Deno 1.15
    • Added Deno 1.21 compat data mapping
    • Added Electron 19.0 and updated 18.0 compat data mapping
    • Added Samsung Internet 17.0 compat data mapping
    • Added Opera Android 68 compat data mapping
• 3.21.1 - 2022-02-16
  
  • Added a bugfix for the WebKit Array.prototype.{ groupBy, groupByToMap } implementation
  • core-js-compat targets parser transforms engine names to lower case
  • atob / btoa marked as fixed in NodeJS 17.5
  • Added Electron 18.0 compat data mapping
  • Added Deno 1.20 compat data mapping
• 3.21.0 - 2022-02-01
  
  • Added Base64 utility methods:
    • atob
    • btoa
  • Added the proper validation of arguments to some methods from web standards
  • Forced replacement of all features from early-stage proposals for avoiding possible web compatibility issues in the future
  • Added Rhino 1.7.14 compat data
  • Added Deno 1.19 compat data mapping
  • Added Opera Android 66 and 67 compat data mapping
  • Added iOS Safari 15.3 and 15.4 compat data mapping
• 3.20.3 - 2022-01-15
  
  • Detects and replaces broken third-party Function#bind polyfills, uses only native Function#bind in the internals
  • structuredClone should throw an error if no arguments passed
  • Changed the structure of notes in __core-js_shared__

from core-js GitHub release notes

Commit messages

Package name: core-js

• 3c83544 3.22.3
• 66be5f0 add a fix for FF99+ `Array.prototype.includes` broken on sparse arrays
• 0ea8a60 update dependencies
• f265837 update dependencies
• 94dcb74 update dependencies
• dcb13bb restart browser on each site since sometime `playwright` crashes because of memory leaks (again)
• fe7c0d3 add some tests
• f9f03b3 update dependencies / linting settings
• 4fcf731 update Babel config
• 89537e1 use one namespace for consistency
• c949d92 3.22.2
• 803c995 fix `URLSearchParams` in IE8- that was broken in the previous release
• 69b0ac7 fix `__lookupGetter__` entries
• 465b3c3 update node versions on ci
• c3283a8 update dependencies
• 48aafd0 3.22.1
• 3e61cd2 prevent experimental warning in NodeJS ~ 18.0 on detection `fetch` API
• 691125e add NodeJS 18.0 compat data
• e4aa626 make tests work on NodeJS 18
• 6844ba3 update dependencies
• a0f8ce1 add NodeJS 18.0 compat data mapping
• 862f06a prevent crash with unexist `browser`
• 2c3dcf0 update dependencies
• 889643e improve some cases of `RegExp` flags handling

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs