[Snyk] Upgrade core-js from 3.6.5 to 3.33.0 #3664
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade core-js from 3.6.5 to 3.33.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: core-js
RegExp
escaping stage 2 proposal, September 2023 TC39 meeting:RegExp.escape
method with the new set of symbols for escapingcore-js
, but it was removed after rejecting the old version of this proposalArrayBuffer.prototype.{ transfer, transferToFixedLength }
and support transferring ofArrayBuffer
s viastructuredClone
to engines withMessageChannel
Math.f16round
polyfillMath.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
Observable
proposal because of incompatibility with the new WHATWGObservable
proposalSymbol
polyfill, #1289Iterator
helpers because of some Web compatibility issuesPromise.withResolvers
marked as supported from V8 ~ Chrome 119Array
grouping proposal features marked as supported from FF119value
argument ofURLSearchParams.prototype.{ has, delete }
marked as properly supported from V8 ~ Chrome 118URL.canParse
andURLSearchParams.prototype.size
marked as supported from Bun 1.0.2structuredClone
feature detection[email protected]
bug, #1288eval
bug, #1287process
polyfill tocore-js
via some bundlers oresm.sh
, #1277Promise.withResolvers
marked as supported from Bun 0.7.1Array
grouping proposal, July 2023 TC39 meeting updates:/actual/
namespaces entries, unconditional forced replacement changed to feature detectionPromise.withResolvers
proposal, July 2023 TC39 meeting updates:/actual/
namespaces entries, unconditional forced replacement changed to feature detectionSet
methods stage 3 proposal, July 2023 TC39 meeting updates::Set
sizes, proposal-set-methods/88IsCallable
check inGetKeysIterator
, proposal-set-methods/101String
wrapper objects, July 2023 TC39 meeting update, proposal-iterator-helpers/281Iterator
is not constructible from the active function object (works as an abstract class)/actual/
namespace entries, unconditional forced replacement changed to feature detection[@@ dispose]()
method when hint isasync-dispose
, proposal-explicit-resource-management/180Float16Array
stage 3 proposal:Float16Array
right now, however, make sense to add some methods from this proposal.Math.f16round
DataView.prototype.getFloat16
DataView.prototype.setFloat16
DataView
get / setUint8Clamped
methods stage 1 proposal:DataView.prototype.getUint8Clamped
DataView.prototype.setUint8Clamped
value
argument ofURLSearchParams.prototype.{ has, delete }
Set
methods implementation by the actual specSymbol.{ dispose, asyncDispose }
descriptors from NodeJS 20.4 / transpilers helpers / userland codeAsyncIteratorPrototype
core-js/configurator
option, #1268Iterator
helpers proposal features marked as supported from V8 ~ Chrome 117Array
grouping proposal features marked as supported from V8 ~ Chrome 117Symbol.{ dispose, asyncDispose }
as supported from NodeJS 20.5.0 (as mentioned above, NodeJS 20.4.0 add it, but with incorrect descriptors)structuredClone
bug with cloning views of transferred buffers, #1265DataView
methodsFloat16Array
instructuredClone
Set
methods proposal marked as supported from Safari 17.0URL
features:URL.canParse
,URLSearchParams.prototype.size
andvalue
argument ofURLSearchParams.prototype.{ has, delete }
marked as supported from Safari 17.0value
argument ofURLSearchParams.prototype.{ has, delete }
marked as supported from Deno 1.35AggregateError
and well-formedJSON.stringify
marked as supported React Native 0.72 HermesString.prototype.isWellFormed
methodString.prototype.toWellFormed
methodes.
namespace modules,/es/
and/stable/
namespaces entriesArray
grouping proposal, May 2023 TC39 meeting updates:Object.groupBy
methodMap.groupBy
method (with the actual semantic - with a minor difference it was present in the collections methods stage 1 proposal)Function.prototype[Symbol.metadata]
(=== null
)/actual/
entriesSymbol.iterator
fallback from callable check toundefined
/null
check, May 2023 TC39 meeting, proposal-iterator-helpers/272IsCallable
check onNextMethod
, deferring errors toCall
site, May 2023 TC39 meeting, proposal-iterator-helpers/274Promise.withResolvers
stage 2 proposal:Promise.withResolvers
methodSymbol
predicates stage 2 proposal:Symbol
, May 2023 TC39 meeting:Symbol.isRegistered
->Symbol.isRegisteredSymbol
methodSymbol.isWellKnown
->Symbol.isWellKnownSymbol
methodvalue
argument ofURLSearchParams.prototype.{ has, delete }
, url/735ArrayBuffer.prototype.{ transfer, transferToFixedLength }
polyfillsAsyncDisposableStack.prototype.adopt
callback, #1258URLSearchParams#size
in ES3 engines (IE8-)Object.{ entries, values }
for some IE versions bug with invisible integer keys onnull
-prototype objectscore-js-compat
, #1235, thanks @ susnuxSet.prototype.difference
that was missed in Bun because of a bug added in 0.6.0Array.prototype.{ group, groupToMap }
marked as no longer supported in WebKit runtimes because of the mentioned above web compat issue. For example, it's disabled from Bun 0.6.2Array
by copy proposal marked as supported from FF115Array.fromAsync
marked as supported from FF115URL.canParse
marked as supported from FF115value
argument ofURLSearchParams.prototype.{ has, delete }
marked as supported from NodeJS 20.2.0 and FF115File
viastructuredClone
String
optimization, #1242URL.canParse
marked as supported (fixed) from NodeJS 20.1.0 and Deno 1.33.2URL.canParse
bugJSON.parse
source text access proposal features marked as supported from V8 ~ Chrome 114ArrayBuffer.prototype.transfer
and friends proposal features marked as supported from V8 ~ Chrome 114URLSearchParams.prototype.size
marked as supported from V8 ~ Chrome 113Read more
ToString
conversion / built-ins nature of some accessorsString.prototype.{ isWellFormed, toWellFormed }
marked as supported from V8 ~ Chrome 111Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:![](https://camo.githubusercontent.com/bf9a207a22076addb9f5bc87abdec2b274a04b839e0658dd71422ff6f563158e/68747470733a2f2f6170692e7365676d656e742e696f2f76312f706978656c2f747261636b3f646174613d65794a33636d6c305a55746c65534936496e4a79576d785a634564485932527954485a7362306c596430645563566734576b4652546e4e434f5545774969776959573576626e6c746233567a535751694f694a6d4f544d794d6a646d4f43316c4e7a56684c5451324f544174596a6b304f5330794e54646a596a51324e7a426b4f546b694c434a6c646d567564434936496c425349485a705a58646c5a434973496e42796233426c636e52705a584d694f6e736963484a4a5a434936496d59354d7a49794e3259344c5755334e5745744e4459354d4331694f5451354c5449314e324e694e4459334d4751354f534a3966513d3d)
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs