[Snyk] Upgrade core-js from 3.21.0 to 3.25.5

[michalziobro]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade core-js from 3.21.0 to 3.25.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 24 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-10-03.

Release notes

Package name: core-js

• 3.25.5 - 2022-10-03
  
  • Fixed regression with an error on reuse of some built-in methods from another realm, #1133
• 3.25.4 - 2022-10-02
  
  • Added a workaround of a Nashorn bug with Function.prototype.{ call, apply, bind } on string methods, #1128
  • Updated lists of [Serializable] and [Transferable] objects in the structuredClone polyfill. Mainly, for better error messages if polyfilling of cloning such types is impossible
  • Array.prototype.{ group, groupToMap } marked as supported from V8 ~ Chromium 108
  • Added Electron 22 compat data mapping
• 3.25.3 - 2022-09-25
  
  • Forced polyfilling of Array.prototype.groupToMap in the pure version for returning wrapped Map instances
  • Fixed existence of Array.prototype.{ findLast, findLastIndex } in /stage/4 entry
  • Added Opera Android 71 compat data mapping
  • Some stylistic changes
• 3.25.2 - 2022-09-18
  
  • Considering document.all as a callable in some missed cases
  • Added Safari 16.0 compat data
  • Added iOS Safari 16.0 compat data mapping
  • Fixed some ancient iOS Safari versions compat data mapping
• 3.25.1 - 2022-09-07
  
  • Added some fixes and workarounds of FF30- typed arrays bug that does not properly convert objects to numbers
  • Added sideEffects field to core-js-pure package.json for better tree shaking, #1117
  • Dropped semver dependency from core-js-compat
    • semver package (ironically) added a breaking change and dropped NodeJS 8 support in the minor 7.1 version, after that semver in core-js-compat was pinned to 7.0 since for avoiding breaking changes it should support NodeJS 8. However, since core-js-compat is usually used with other packages that use semver dependency, it causes multiple duplications of semver in dependencies. So I decided to remove semver dependency and replace it with a couple of simple helpers.
  • Added Bun 0.1.6-0.1.11 compat data
  • Added Deno 1.25 compat data mapping
  • Updated Electron 21 compat data mapping
  • Some stylistic changes, minor fixes, and improvements
• 3.25.0 - 2022-08-24
  
  • Added Object.prototype.__proto__ polyfill
    • It's optional, legacy, and in some cases (mainly because of developers' mistakes) can cause problems, but some libraries depend on it, and most code can't work without the proper libraries' ecosystem
    • Only for modern engines where this feature is missed (like Deno), it's not installed in IE10- since here we have no proper way setting of the prototype
    • Without fixes of early implementations where it's not an accessor since those fixes are impossible
    • Only for the global version
  • Considering document.all as an object in some missed cases, see ECMAScript Annex B 3.6
  • Avoiding unnecessary promise creation and validation result in %WrapForValid(Async)IteratorPrototype%.return, proposal-iterator-helpers/215
  • Fixed omitting the result of proxing .return in %IteratorHelperPrototype%.return, #1116
  • Fixed the order creation of properties of iteration result object of some iterators (value should be created before done)
  • Fixed some cases of Safari < 13 bug - silent on non-writable array .length setting
  • Fixed ArrayBuffer.length in V8 ~ Chrome 27-
  • Relaxed condition of re-usage native WeakMap for internal states with multiple core-js copies
  • Availability cloning of FileList in the structuredClone polyfill extended to some more old engines versions
  • Some stylistic changes and minor fixes
  • Throwing a TypeError in core-js-compat / core-js-builder in case of passing invalid module names / filters for avoiding unexpected result, related to #1115
  • Added missed NodeJS 13.2 to esmodules core-js-compat / core-js-builder target
  • Added Electron 21 compat data mapping
  • Added Oculus Browser 23.0 compat data mapping
• 3.24.1 - 2022-07-29
  
  • NodeJS is ignored in IS_BROWSER detection to avoid a false positive with jsdom, #1110
  • Fixed detection of @@ species support in Promise in some old engines
  • { Array, %TypedArray% }.prototype.{ findLast, findLastIndex } marked as shipped in FF104
  • Added iOS Safari 15.6 compat data mapping
  • Fixed Opera 15 compat data mapping
• 3.24.0 - 2022-07-25
  
  • Recent updates of the iterator helpers proposal, #1101:
    • .asIndexedPairs renamed to .indexed, proposal-iterator-helpers/183:
      • Iterator.prototype.asIndexedPairs -> Iterator.prototype.indexed
      • AsyncIterator.prototype.asIndexedPairs -> AsyncIterator.prototype.indexed
    • Avoid exposing spec fiction %AsyncFromSyncIteratorPrototype% in AsyncIterator.from and Iterator.prototype.toAsync, proposal-iterator-helpers/182, proposal-iterator-helpers/202
    • Avoid unnecessary promise creation in %WrapForValidAsyncIteratorPrototype%.next, proposal-iterator-helpers/197
    • Do not validate value in %WrapForValid(Async)IteratorPrototype%.next, proposal-iterator-helpers/197 and proposal-iterator-helpers/205
    • Do not forward the parameter of .next / .return to an underlying iterator by the extended iterator protocol, a part of proposal-iterator-helpers/194
    • .throw methods removed from all wrappers / helpers prototypes, a part of proposal-iterator-helpers/194
    • Close inner iterators of { Iterator, AsyncIterator }.prototype.flatMap proxy iterators on .return, proposal-iterator-helpers/195
    • Throw RangeError on NaN in { Iterator, AsyncIterator }.prototype.{ drop, take }, proposal-iterator-helpers/181
    • Many other updates and fixes of this proposal
  • %TypedArray%.prototype.toSpliced method removed from the change array by copy proposal and marked as obsolete in core-js, proposal-change-array-by-copy/88
  • Polyfill Promise with unhandledrejection event support (browser style) in Deno < 1.24
  • Available new targets in core-js-compat / core-js-builder and added compat data for them:
    • Bun (bun), compat data for 0.1.1-0.1.5, #1103
    • Hermes (hermes), compat data for 0.1-0.11, #1099
    • Oculus Browser (oculus), compat data mapping for 3.0-22.0, #1098
  • Added Samsung Internet 18.0 compat data mapping
• 3.23.5 - 2022-07-17
  
  • Fixed a typo in the structuredClone feature detection, #1106
  • Added Opera Android 70 compat data mapping
• 3.23.4 - 2022-07-09
  
  • Added a workaround of the Bun ~ 0.1.1 bug that define some globals with incorrect property descriptors and that causes a crash of core-js
  • Added a fix of the FF103+ structuredClone bugs (1774866 (fixed in FF104) and 1777321 (still not fixed)) that now can clone errors, but .stack of the clone is an empty string
  • Fixed { Map, WeakMap }.prototype.emplace logic, #1102
  • Fixed order of errors throwing on iterator helpers
• 3.23.3 - 2022-06-25
• 3.23.2 - 2022-06-20
• 3.23.1 - 2022-06-14
• 3.23.0 - 2022-06-13
• 3.22.8 - 2022-06-01
• 3.22.7 - 2022-05-24
• 3.22.6 - 2022-05-22
• 3.22.5 - 2022-05-10
• 3.22.4 - 2022-05-02
• 3.22.3 - 2022-04-28
• 3.22.2 - 2022-04-21
• 3.22.1 - 2022-04-19
• 3.22.0 - 2022-04-15
• 3.21.1 - 2022-02-16
• 3.21.0 - 2022-02-01

from core-js GitHub release notes

Commit messages

Package name: core-js

• 4a8b1f7 3.25.5
• 1ad3e1a fix regression with an error on reuse of some built-in methods from another realm, close #1133
• d59e440 3.25.4
• d76041c update lists of `[Serializable]` and `[Transferable]` objects in the `structuredClone` polyfill
• fd7812a some stylistic changes, improve a note
• afcc148 update dependencies
• 14364db add Electron 22 compat data mapping
• 3172ef6 Merge pull request #1131 from AprilArcus/april/1130
• 8bd8508 Fix more Nashorn problems
• 44fe613 fix `no-unused-vars` setting
• 9307fb7 Merge pull request #1129 from AprilArcus/april/1128
• 775f6ba some fixes
• 7451b1d Fix uncurryThis on Nashorn
• 27b5630 add a workaround of a Nashorn bug with `Function.prototype.{ call, bind }`, close #1128
• 7af3ced fix a link
• 325cd4e update dependencies
• 6adfd9a update a link
• ce292cb mark `Array.prototype.{ group, groupToMap }` marked as supported from V8 ~ Chromium 108
• 12509bd 3.25.3
• 3051ab6 Merge pull request #1125 from zloirock/eslint-flat
• 5a6465c remove `no-loss-of-precision` since it works not as expected in some cases
• b3e4874 some stylistic changes
• 3039471 disable `unicorn/prefer-code-point` as useless for `core-js` case
• ad96d14 update `eslint`, enable `logical-assignment-operators` rule

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}