[Snyk] Upgrade core-js from 3.6.5 to 3.20.1 #49

snyk-bot · 2022-01-17T14:33:43Z

Snyk has created this PR to upgrade core-js from 3.6.5 to 3.20.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 41 versions ahead of your current version.
The recommended version was released 25 days ago, on 2021-12-23.

Release notes

Package name: core-js

3.20.1 - 2021-12-23
- Fixed the order of calling reactions of already fulfilled / rejected promises in Promise.prototype.then, #1026
- Fixed possible memory leak in specific promise chains
- Fixed some missed dependencies of entries
- Added Deno 1.18 compat data mapping
3.20.0 - 2021-12-15
- Added structuredClone method from the HTML spec, see MDN
  - Includes all cases of cloning and transferring of required ECMAScript and platform types that can be polyfilled, for the details see the caveats
  - Uses native structured cloning algorithm implementations where it's possible
  - Includes the new semantic of errors cloning from html/5749
- Added DOMException polyfill, the Web IDL spec, see MDN
  - Includes DOMException and its attributes polyfills with fixes of many different engines bugs
  - Includes DOMException#stack property polyfill in engines that should have it
  - Reuses native DOMException implementations where it's possible (for example, in old NodeJS where it's not exposed as global)
- Added support of cause on all Error types
- Added Error.prototype.toString method polyfill with fixes of many different bugs of JS engines
- Added Number.prototype.toExponential method polyfill with fixes of many different bugs of JS engines
- Array grouping proposal:
  - Moved to stage 3
  - Added Array.prototype.groupByToMap method
  - Removed @@ species support
- Added change Array by copy stage 2 proposal:
  - Array.prototype.toReversed
  - Array.prototype.toSorted
  - Array.prototype.toSpliced
  - Array.prototype.with
  - %TypedArray%.prototype.toReversed
  - %TypedArray%.prototype.toSorted
  - %TypedArray%.prototype.toSpliced
  - %TypedArray%.prototype.with
- Added Iterator.prototype.toAsync method from the iterator helpers stage 2 proposal
- Array.fromAsync proposal moved to stage 2
- Added String.cooked stage 1 proposal:
- Added Function.prototype.unThis stage 0 proposal
- Added Function.{ isCallable, isConstructor } stage 0 proposal:
  - Function.isCallable
  - Function.isConstructor
- Added a workaround of most cases breakage modern String#at after loading obsolete String#at proposal module, #1019
- Fixed Array.prototype.{ values, @@ iterator }.name in V8 ~ Chrome 45-
- Fixed validation of typed arrays in typed arrays iteration methods in V8 ~ Chrome 50-
- Extension of the API, #1012
  - Added a new core-js/actual/** namespace
  - Added entry points for each finished post-ES6 proposal
3.19.3 - 2021-12-06
- Fixed internal slots check in methods of some built-in types, #1017
- Fixed URLSearchParams iterator .next that should be enumerable by the spec
- Refactored Subscription
- Added NodeJS 17.2 compat data mapping
3.19.2 - 2021-11-29
- Added a workaround for a UC Browser specific version bug with unobservable RegExp#sticky flag, #1008, #1015
- Added handling of comments and specific spaces to Function#name polyfill, #1010, thanks @ ildar-shaimordanov
- Prevented some theoretical cases of breaking / observing the internal state by patching Array.prototype[@@ species]
- Refactored URL and URLSearchParams
- Added iOS Safari 15.2 compat data mapping
- Added Electron 17.0 compat data mapping
- Updated Deno compat data mapping
3.19.1 - 2021-11-02
- Added a workaround for FF26- bug where ArrayBuffers are non-extensible, but Object.isExtensible does not report it:
  - Fixed in Object.{ isExtensible, isSealed, isFrozen } and Reflect.isExtensible
  - Fixed handling of ArrayBuffers as collections keys
- Fixed Object#toString on AggregateError in IE10-
- Fixed possible lack of dependencies of WeakMap in IE8-
- .findLast methods family marked as supported from Chrome 97
- Fixed inheritance of Electron compat data web. modules
- Fixed Safari 15.1 compat data (some features were not added)
- Added iOS Safari 15.1 compat data mapping
3.19.0 - 2021-10-25
- Most built-ins are encapsulated in core-js for preventing possible cases of breaking / observing the internal state by patching / deleting of them
  - Avoid .call / .apply prototype methods that could be patched
  - Avoid instanceof operator - implicit .prototype / @@ hasInstance access that could be patched
  - Avoid RegExp#test, String#match and some over methods - implicit .exec and RegExp well-known symbols access that could be patched
- Clearing of Error stack from extra entries experimentally added to AggregateError, #996, in case lack of problems it will be extended to other cases
- In engines with native Symbol support, new well-known symbols created with usage Symbol.for for ensuring the same keys in different realms, #998
- Added a workaround of a BrowserFS NodeJS process polyfill bug that incorrectly reports V8 version that's used in some cases of core-js feature detection
- Fixed normalization of message AggregateError argument
- Fixed order of arguments conversion in Math.scale, a spec draft bug
- Fixed core-js-builder work in NodeJS 17, added a workaround of webpack + NodeJS 17 issue
- Added NodeJS 17.0 compat data mapping
- Added Opera Android 65 compat data mapping
- Updated Electron 16.0 compat data mapping
- Many other minor fixes and improvements
3.18.3 - 2021-10-12
- Fixed the prototype chain of AggregateError constructor that should contain Error constructor
- Fixed incorrect AggregateError.prototype properties descriptors
- Fixed InstallErrorCause internal operation
- Added NodeJS 16.11 compat data mapping
- Added Deno 1.16 compat data mapping
- Object.hasOwn marked as supported from Safari 15.1
3.18.2 - 2021-10-05
- Early { Array, %TypedArray% }.fromAsync errors moved to the promise, per the latest changes of the spec draft
- Internal ToInteger(OrInfinity) operation returns +0 for -0 argument, ES2020+ update
- Fixed theoretical problems with handling bigint in Number constructor wrapper
- Fixed String.raw with extra arguments
- Fixed some missed dependencies in entry points
- Some other minor fixes and improvements
- Refactoring
3.18.1 - 2021-09-26
- Fixed String.prototype.substr feature detection and compat data
- Removed mistakenly added .forEach from prototypes of some DOM collections where it shouldn't be, #988, #987, thanks @ moorejs
- Added cause to AggregateError constructor implementation (still without adding to the feature detection)
- Families of .at and .findLast methods marked as supported in Safari TP
- Added Electron 16.0 compat data mapping
3.18.0 - 2021-09-19
- Added Array.fromAsync stage 1 proposal:
  - Array.fromAsync
  - %TypedArray%.fromAsync
- .name and .toString() on polyfilled functions improved in many different cases
- Improved internal IsConstructor and IsCallable checks
- Fixed some internal cases of GetMethod operation
- Fixed a bug of MS Edge 18- parseInt / parseFloat with boxed symbols
- Fixed es.array.{ index-of, last-index-of } compat data
- Added Deno 1.15 compat data mapping
- Some other minor fixes and optimizations
3.17.3 - 2021-09-09
3.17.2 - 2021-09-02
3.17.1 - 2021-09-01
3.17.0 - 2021-09-01
3.16.4 - 2021-08-29
3.16.3 - 2021-08-24
3.16.2 - 2021-08-17
3.16.1 - 2021-08-08
3.16.0 - 2021-07-30
3.15.2 - 2021-06-29
3.15.1 - 2021-06-22
3.15.0 - 2021-06-20
3.14.0 - 2021-06-05
3.13.1 - 2021-05-29
3.13.0 - 2021-05-25
3.12.1 - 2021-05-08
3.12.0 - 2021-05-06
3.11.3 - 2021-05-05
3.11.2 - 2021-05-03
3.11.1 - 2021-04-28
3.11.0 - 2021-04-22
3.10.2 - 2021-04-19
3.10.1 - 2021-04-07
3.10.0 - 2021-03-31
3.9.1 - 2021-02-28
3.9.0 - 2021-02-18
3.8.3 - 2021-01-19
3.8.2 - 2021-01-03
3.8.1 - 2020-12-06
3.8.0 - 2020-11-25
3.7.0 - 2020-11-06
3.6.5 - 2020-04-09

from core-js GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade core-js from 3.6.5 to 3.20.1. See this package in npm: https://www.npmjs.com/package/core-js See this project in Snyk: https://app.snyk.io/org/sniperadmin/project/d2dcca28-e4f5-495e-b670-b981d6bba4d1?utm_source=github&utm_medium=referral&page=upgrade-pr

commit-lint · 2022-01-17T14:33:46Z

Bug Fixes

upgrade core-js from 3.6.5 to 3.20.1 (7e30445)

Contributors

snyk-bot

Commit-Lint commands

You can trigger Commit-Lint actions by commenting on this PR:

@Commit-Lint merge patch will merge dependabot PR on "patch" versions (X.X.Y - Y change)
@Commit-Lint merge minor will merge dependabot PR on "minor" versions (X.Y.Y - Y change)
@Commit-Lint merge major will merge dependabot PR on "major" versions (Y.Y.Y - Y change)
@Commit-Lint merge disable will desactivate merge dependabot PR
@Commit-Lint review will approve dependabot PR
@Commit-Lint stop review will stop approve dependabot PR

mergify · 2022-02-12T20:29:36Z