Skip to content

[Snyk] Upgrade core-js-pure from 3.6.5 to 3.25.1#26

Closed
terrorizer1980 wants to merge 1 commit intomasterfrom
snyk-upgrade-c9290c8cc6fa2d579075638c8343a128
Closed

[Snyk] Upgrade core-js-pure from 3.6.5 to 3.25.1#26
terrorizer1980 wants to merge 1 commit intomasterfrom
snyk-upgrade-c9290c8cc6fa2d579075638c8343a128

Conversation

@terrorizer1980
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade core-js-pure from 3.6.5 to 3.25.1.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 64 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2022-09-07.
Release notes
Package name: core-js-pure
  • 3.25.1 - 2022-09-07
    • Added some fixes and workarounds of FF30- typed arrays bug that does not properly convert objects to numbers
    • Added sideEffects field to core-js-pure package.json for better tree shaking, #1117
    • Dropped semver dependency from core-js-compat
      • semver package (ironically) added a breaking change and dropped NodeJS 8 support in the minor 7.1 version, after that semver in core-js-compat was pinned to 7.0 since for avoiding breaking changes it should support NodeJS 8. However, since core-js-compat is usually used with other packages that use semver dependency, it causes multiple duplications of semver in dependencies. So I decided to remove semver dependency and replace it with a couple of simple helpers.
    • Added Bun 0.1.6-0.1.11 compat data
    • Added Deno 1.25 compat data mapping
    • Updated Electron 21 compat data mapping
    • Some stylistic changes, minor fixes, and improvements
  • 3.25.0 - 2022-08-24
    • Added Object.prototype.__proto__ polyfill
      • It's optional, legacy, and in some cases (mainly because of developers' mistakes) can cause problems, but some libraries depend on it, and most code can't work without the proper libraries' ecosystem
      • Only for modern engines where this feature is missed (like Deno), it's not installed in IE10- since here we have no proper way setting of the prototype
      • Without fixes of early implementations where it's not an accessor since those fixes are impossible
      • Only for the global version
    • Considering document.all as an object in some missed cases, see ECMAScript Annex B 3.6
    • Avoiding unnecessary promise creation and validation result in %WrapForValid(Async)IteratorPrototype%.return, proposal-iterator-helpers/215
    • Fixed omitting the result of proxing .return in %IteratorHelperPrototype%.return, #1116
    • Fixed the order creation of properties of iteration result object of some iterators (value should be created before done)
    • Fixed some cases of Safari < 13 bug - silent on non-writable array .length setting
    • Fixed ArrayBuffer.length in V8 ~ Chrome 27-
    • Relaxed condition of re-usage native WeakMap for internal states with multiple core-js copies
    • Availability cloning of FileList in the structuredClone polyfill extended to some more old engines versions
    • Some stylistic changes and minor fixes
    • Throwing a TypeError in core-js-compat / core-js-builder in case of passing invalid module names / filters for avoiding unexpected result, related to #1115
    • Added missed NodeJS 13.2 to esmodules core-js-compat / core-js-builder target
    • Added Electron 21 compat data mapping
    • Added Oculus Browser 23.0 compat data mapping
  • 3.24.1 - 2022-07-29
    • NodeJS is ignored in IS_BROWSER detection to avoid a false positive with jsdom, #1110
    • Fixed detection of @@ species support in Promise in some old engines
    • { Array, %TypedArray% }.prototype.{ findLast, findLastIndex } marked as shipped in FF104
    • Added iOS Safari 15.6 compat data mapping
    • Fixed Opera 15 compat data mapping
  • 3.24.0 - 2022-07-25
  • 3.23.5 - 2022-07-17
    • Fixed a typo in the structuredClone feature detection, #1106
    • Added Opera Android 70 compat data mapping
  • 3.23.4 - 2022-07-09
    • Added a workaround of the Bun ~ 0.1.1 bug that define some globals with incorrect property descriptors and that causes a crash of core-js
    • Added a fix of the FF103+ structuredClone bugs (1774866 (fixed in FF104) and 1777321 (still not fixed)) that now can clone errors, but .stack of the clone is an empty string
    • Fixed { Map, WeakMap }.prototype.emplace logic, #1102
    • Fixed order of errors throwing on iterator helpers
  • 3.23.3 - 2022-06-25
  • 3.23.2 - 2022-06-20
    • Avoided creation of extra properties for the handling of %TypedArray% constructors in new methods, #1092 (comment)
    • Added Deno 1.23 compat data mapping
  • 3.23.1 - 2022-06-14
    • Fixed possible error on multiple core-js copies, #1091
    • Added v flag to RegExp.prototype.flags implementation in case if current V8 bugs will not be fixed before this flag implementation
  • 3.23.0 - 2022-06-13
    • Array find from last moved to the stable ES, according to June 2022 TC39 meeting:
      • Array.prototype.findLast
      • Array.prototype.findLastIndex
      • %TypedArray%.prototype.findLast
      • %TypedArray%.prototype.findLastIndex
    • Methods from the Array grouping proposal renamed, according to June 2022 TC39 meeting:
      • Array.prototype.groupBy -> Array.prototype.group
      • Array.prototype.groupByToMap -> Array.prototype.groupToMap
    • Changed the order of operations in %TypedArray%.prototype.with following proposal-change-array-by-copy/86, according to June 2022 TC39 meeting
    • Decorator Metadata proposal extracted from Decorators proposal as a separate stage 2 proposal, according to March 2022 TC39 meeting, Symbol.metadataKey replaces Symbol.metadata
    • Added Array.prototype.push polyfill with some fixes for modern engines
    • Added Array.prototype.unshift polyfill with some fixes for modern engines
    • Fixed a bug in the order of getting flags in RegExp.prototype.flags in the actual version of V8
    • Fixed property descriptors of some Math and Number constants
    • Added a workaround of V8 ArrayBufferDetaching protector cell invalidation and performance degradation on structuredClone feature detection, one more case of #679
    • Added detection of NodeJS bug in structuredClone that can not clone DOMException (just in case for future versions that will fix other issues)
    • Compat data:
      • Added NodeJS 18.3 compat data mapping
      • Added and fixed Deno 1.22 and 1.21 compat data mapping
      • Added Opera Android 69 compat data mapping
      • Updated Electron 20.0 compat data mapping
  • 3.22.8 - 2022-06-01
  • 3.22.7 - 2022-05-24
  • 3.22.6 - 2022-05-22
  • 3.22.5 - 2022-05-10
  • 3.22.4 - 2022-05-02
  • 3.22.3 - 2022-04-28
  • 3.22.2 - 2022-04-21
  • 3.22.1 - 2022-04-19
  • 3.22.0 - 2022-04-15
  • 3.21.1 - 2022-02-16
  • 3.21.0 - 2022-02-01
  • 3.20.3 - 2022-01-15
  • 3.20.2 - 2022-01-01
  • 3.20.1 - 2021-12-23
  • 3.20.0 - 2021-12-15
  • 3.19.3 - 2021-12-06
  • 3.19.2 - 2021-11-29
  • 3.19.1 - 2021-11-02
  • 3.19.0 - 2021-10-25
  • 3.18.3 - 2021-10-12
  • 3.18.2 - 2021-10-05
  • 3.18.1 - 2021-09-26
  • 3.18.0 - 2021-09-19
  • 3.17.3 - 2021-09-09
  • 3.17.2 - 2021-09-02
  • 3.17.1 - 2021-09-01
  • 3.17.0 - 2021-09-01
  • 3.16.4 - 2021-08-29
  • 3.16.3 - 2021-08-24
  • 3.16.2 - 2021-08-17
  • 3.16.1 - 2021-08-08
  • 3.16.0 - 2021-07-30
  • 3.15.2 - 2021-06-29
  • 3.15.1 - 2021-06-22
  • 3.15.0 - 2021-06-20
  • 3.14.0 - 2021-06-05
  • 3.13.1 - 2021-05-29
  • 3.13.0 - 2021-05-25
  • 3.12.1 - 2021-05-08
  • 3.12.0 - 2021-05-06
  • 3.11.3 - 2021-05-05
  • 3.11.2 - 2021-05-03
  • 3.11.1 - 2021-04-28
  • 3.11.0 - 2021-04-22
  • 3.10.2 - 2021-04-19
  • 3.10.1 - 2021-04-07
  • 3.10.0 - 2021-03-31
  • 3.9.1 - 2021-02-28
  • 3.9.0 - 2021-02-18
  • 3.8.3 - 2021-01-19
  • 3.8.2 - 2021-01-03
  • 3.8.1 - 2020-12-06
  • 3.8.0 - 2020-11-25
  • 3.7.0 - 2020-11-06
  • 3.6.5 - 2020-04-10
from core-js-pure GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@stale
Copy link

stale bot commented Oct 13, 2022

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Oct 13, 2022
@stale stale bot closed this Oct 20, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments