Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade core-js from 3.6.5 to 3.22.8 #19

Closed

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade core-js from 3.6.5 to 3.22.8.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 54 versions ahead of your current version.
  • The recommended version was released a month ago, on 2022-06-01.
Release notes
Package name: core-js
  • 3.22.8 - 2022-06-01
    • Fixed possible multiple call of ToBigInt / ToNumber conversion of the argument passed to %TypedArray%.prototype.fill in V8 ~ Chrome < 59, Safari < 14.1, FF < 55, Edge <=18
    • Fixed some cases of DeletePropertyOrThrow in IE9-
    • Fixed the kind of error (TypeError instead of Error) on incorrect exec result in RegExp.prototype.test polyfill
    • Fixed dependencies of { actual, full, features }/typed-array/at entries
    • Added Electron 20.0 compat data mapping
    • Added iOS Safari 15.5 compat data mapping
    • Refactoring
  • 3.22.7 - 2022-05-24
    • Added a workaround for V8 ~ Chrome 53 bug with non-writable prototype of some methods, #1083
  • 3.22.6 - 2022-05-22
    • Fixed possible double call of ToNumber conversion on arguments of Math.{ fround, trunc } polyfills
    • Array.prototype.includes marked as fixed in FF102
  • 3.22.5 - 2022-05-10
    • Ensured that polyfilled constructors .prototype is non-writable
    • Ensured that polyfilled methods .prototype is not defined
    • Added detection and fix of a V8 ~ Chrome <103 bug of struturedClone that returns null if cloned object contains multiple references to one error
  • 3.22.4 - 2022-05-02
    • Ensured proper .length of polyfilled functions even in compressed code (excepting some ancient engines)
    • Ensured proper .name of polyfilled accessors (excepting some ancient engines)
    • Ensured proper source / ToString conversion of polyfilled accessors
    • Actualized Rhino compat data
    • Refactoring
  • 3.22.3 - 2022-04-28
    • Added a fix for FF99+ Array.prototype.includes broken on sparse arrays
  • 3.22.2 - 2022-04-21
    • Fixed URLSearchParams in IE8- that was broken in the previous release
    • Fixed __lookupGetter__ entries
  • 3.22.1 - 2022-04-19
    • Improved some cases of RegExp flags handling
    • Prevented experimental warning in NodeJS ~ 18.0 on detection fetch API
    • Added NodeJS 18.0 compat data
  • 3.22.0 - 2022-04-15
    • Change Array by copy proposal:
      • Moved to Stage 3, March TC39 meeting
      • Disabled forced replacement and added /actual/ entry points for methods from this proposal
      • Array.prototype.toSpliced throws a TypeError instead of RangeError if the result length is more than MAX_SAFE_INTEGER, proposal-change-array-by-copy/70
    • Added some more atob / btoa fixes:
      • NodeJS <17.9 atob does not ignore spaces, node/42530
      • Actual NodeJS atob does not validate encoding, node/42646
      • FF26- implementation does not properly convert argument to string
      • IE / Edge <16 implementation have wrong arity
    • Added /full/ namespace as the replacement for /features/ since it's more descriptive in context of the rest namespaces (/es//stable//actual//full/)
    • Avoided propagation of removed parts of proposals to upper stages. For example, %TypedArray%.prototype.groupBy was removed from the Array grouping proposal a long time ago. We can't completely remove this method since it's a breaking change. But this proposal has been promoted to stage 3 - so the proposal should be promoted without this method, this method should not be available in /actual/ entries - but it should be available in early-stage entries to avoid breakage.
    • Significant internal refactoring and splitting of modules (but without exposing to public API since it will be a breaking change - it will be exposed in the next major version)
    • Bug fixes:
      • Fixed work of non-standard V8 Error features with wrapped Error constructors, #1061
      • null and undefined allowed as the second argument of structuredClone, #1056
    • Tooling:
      • Stabilized proposals are filtered out from the core-js-compat -> core-js-builder -> core-js-bundle output. That mean that if the output contains, for example, es.object.has-own, the legacy reference to it, esnext.object.has-own, no longer added.
      • Aligned modules filters of core-js-builder and core-js-compat, now it's modules and exclude options
      • Added support of entry points, modules, regexes, and arrays of them to those filters
      • Missed targets option of core-js-compat means that the targets filter just will not be applied, so the result will contain modules required for all possible engines
    • Compat data:
      • .stack property on DOMException marked as supported from Deno 1.15
      • Added Deno 1.21 compat data mapping
      • Added Electron 19.0 and updated 18.0 compat data mapping
      • Added Samsung Internet 17.0 compat data mapping
      • Added Opera Android 68 compat data mapping
  • 3.21.1 - 2022-02-16
    • Added a bugfix for the WebKit Array.prototype.{ groupBy, groupByToMap } implementation
    • core-js-compat targets parser transforms engine names to lower case
    • atob / btoa marked as fixed in NodeJS 17.5
    • Added Electron 18.0 compat data mapping
    • Added Deno 1.20 compat data mapping
  • 3.21.0 - 2022-02-01
  • 3.20.3 - 2022-01-15
  • 3.20.2 - 2022-01-01
  • 3.20.1 - 2021-12-23
  • 3.20.0 - 2021-12-15
  • 3.19.3 - 2021-12-06
  • 3.19.2 - 2021-11-29
  • 3.19.1 - 2021-11-02
  • 3.19.0 - 2021-10-25
  • 3.18.3 - 2021-10-12
  • 3.18.2 - 2021-10-05
  • 3.18.1 - 2021-09-26
  • 3.18.0 - 2021-09-19
  • 3.17.3 - 2021-09-09
  • 3.17.2 - 2021-09-02
  • 3.17.1 - 2021-09-01
  • 3.17.0 - 2021-09-01
  • 3.16.4 - 2021-08-29
  • 3.16.3 - 2021-08-24
  • 3.16.2 - 2021-08-17
  • 3.16.1 - 2021-08-08
  • 3.16.0 - 2021-07-30
  • 3.15.2 - 2021-06-29
  • 3.15.1 - 2021-06-22
  • 3.15.0 - 2021-06-20
  • 3.14.0 - 2021-06-05
  • 3.13.1 - 2021-05-29
  • 3.13.0 - 2021-05-25
  • 3.12.1 - 2021-05-08
  • 3.12.0 - 2021-05-06
  • 3.11.3 - 2021-05-05
  • 3.11.2 - 2021-05-03
  • 3.11.1 - 2021-04-28
  • 3.11.0 - 2021-04-22
  • 3.10.2 - 2021-04-19
  • 3.10.1 - 2021-04-07
  • 3.10.0 - 2021-03-31
  • 3.9.1 - 2021-02-28
  • 3.9.0 - 2021-02-18
  • 3.8.3 - 2021-01-19
  • 3.8.2 - 2021-01-03
  • 3.8.1 - 2020-12-06
  • 3.8.0 - 2020-11-25
  • 3.7.0 - 2020-11-06
  • 3.6.5 - 2020-04-09
from core-js GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@stale
Copy link

stale bot commented Jul 12, 2022

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Jul 12, 2022
@stale stale bot closed this Jul 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant