mlops.toys icon indicating copy to clipboard operation
mlops.toys copied to clipboard

[Snyk] Upgrade core-js from 3.16.1 to 3.22.4

Open snyk-bot opened this issue 2 years ago • 1 comments

Snyk has created this PR to upgrade core-js from 3.16.1 to 3.22.4.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 26 versions ahead of your current version.
  • The recommended version was released 24 days ago, on 2022-05-02.
Release notes
Package name: core-js
  • 3.22.4 - 2022-05-02
    • Ensured proper .length of polyfilled functions even in compressed code (excepting some ancient engines)
    • Ensured proper .name of polyfilled accessors (excepting some ancient engines)
    • Ensured proper source / ToString conversion of polyfilled accessors
    • Actualized Rhino compat data
    • Refactoring
  • 3.22.3 - 2022-04-28
    • Added a fix for FF99+ Array.prototype.includes broken on sparse arrays
  • 3.22.2 - 2022-04-21
    • Fixed URLSearchParams in IE8- that was broken in the previous release
    • Fixed __lookupGetter__ entries
  • 3.22.1 - 2022-04-19
    • Improved some cases of RegExp flags handling
    • Prevented experimental warning in NodeJS ~ 18.0 on detection fetch API
    • Added NodeJS 18.0 compat data
  • 3.22.0 - 2022-04-15
    • Change Array by copy proposal:
      • Moved to Stage 3, March TC39 meeting
      • Disabled forced replacement and added /actual/ entry points for methods from this proposal
      • Array.prototype.toSpliced throws a TypeError instead of RangeError if the result length is more than MAX_SAFE_INTEGER, proposal-change-array-by-copy/70
    • Added some more atob / btoa fixes:
      • NodeJS <17.9 atob does not ignore spaces, node/42530
      • Actual NodeJS atob does not validate encoding, node/42646
      • FF26- implementation does not properly convert argument to string
      • IE / Edge <16 implementation have wrong arity
    • Added /full/ namespace as the replacement for /features/ since it's more descriptive in context of the rest namespaces (/es//stable//actual//full/)
    • Avoided propagation of removed parts of proposals to upper stages. For example, %TypedArray%.prototype.groupBy was removed from the Array grouping proposal a long time ago. We can't completely remove this method since it's a breaking change. But this proposal has been promoted to stage 3 - so the proposal should be promoted without this method, this method should not be available in /actual/ entries - but it should be available in early-stage entries to avoid breakage.
    • Significant internal refactoring and splitting of modules (but without exposing to public API since it will be a breaking change - it will be exposed in the next major version)
    • Bug fixes:
      • Fixed work of non-standard V8 Error features with wrapped Error constructors, #1061
      • null and undefined allowed as the second argument of structuredClone, #1056
    • Tooling:
      • Stabilized proposals are filtered out from the core-js-compat -> core-js-builder -> core-js-bundle output. That mean that if the output contains, for example, es.object.has-own, the legacy reference to it, esnext.object.has-own, no longer added.
      • Aligned modules filters of core-js-builder and core-js-compat, now it's modules and exclude options
      • Added support of entry points, modules, regexes, and arrays of them to those filters
      • Missed targets option of core-js-compat means that the targets filter just will not be applied, so the result will contain modules required for all possible engines
    • Compat data:
      • .stack property on DOMException marked as supported from Deno 1.15
      • Added Deno 1.21 compat data mapping
      • Added Electron 19.0 and updated 18.0 compat data mapping
      • Added Samsung Internet 17.0 compat data mapping
      • Added Opera Android 68 compat data mapping
  • 3.21.1 - 2022-02-16
    • Added a bugfix for the WebKit Array.prototype.{ groupBy, groupByToMap } implementation
    • core-js-compat targets parser transforms engine names to lower case
    • atob / btoa marked as fixed in NodeJS 17.5
    • Added Electron 18.0 compat data mapping
    • Added Deno 1.20 compat data mapping
  • 3.21.0 - 2022-02-01
    • Added Base64 utility methods:
      • atob
      • btoa
    • Added the proper validation of arguments to some methods from web standards
    • Forced replacement of all features from early-stage proposals for avoiding possible web compatibility issues in the future
    • Added Rhino 1.7.14 compat data
    • Added Deno 1.19 compat data mapping
    • Added Opera Android 66 and 67 compat data mapping
    • Added iOS Safari 15.3 and 15.4 compat data mapping
  • 3.20.3 - 2022-01-15
    • Detects and replaces broken third-party Function#bind polyfills, uses only native Function#bind in the internals
    • structuredClone should throw an error if no arguments passed
    • Changed the structure of notes in __core-js_shared__
  • 3.20.2 - 2022-01-01
  • 3.20.1 - 2021-12-23
    • Fixed the order of calling reactions of already fulfilled / rejected promises in Promise.prototype.then, #1026
    • Fixed possible memory leak in specific promise chains
    • Fixed some missed dependencies of entries
    • Added Deno 1.18 compat data mapping
  • 3.20.0 - 2021-12-15
  • 3.19.3 - 2021-12-06
  • 3.19.2 - 2021-11-29
  • 3.19.1 - 2021-11-02
  • 3.19.0 - 2021-10-25
  • 3.18.3 - 2021-10-12
  • 3.18.2 - 2021-10-05
  • 3.18.1 - 2021-09-26
  • 3.18.0 - 2021-09-19
  • 3.17.3 - 2021-09-09
  • 3.17.2 - 2021-09-02
  • 3.17.1 - 2021-09-01
  • 3.17.0 - 2021-09-01
  • 3.16.4 - 2021-08-29
  • 3.16.3 - 2021-08-24
  • 3.16.2 - 2021-08-17
  • 3.16.1 - 2021-08-08
from core-js GitHub release notes
Commit messages
Package name: core-js
  • 6ba79a5 3.22.4
  • 14b2d5e missed nbsp
  • 4c6e83c integrate compat table to browser runner of compat data tests
  • 47f8920 take into account splitted modules in compat data result diff
  • efa5631 reuse the list of ignored in compat data modules, provide some additional data in the source
  • e591ab7 ignore splitted `setImmediate` modules in IE -> Edge compat data mapping
  • 01ea350 improve docs
  • ae61bb3 improve docs
  • 928b853 add some docs
  • c0bf1d6 inherit only ES Deno data, just in case
  • 12b1a02 add some details
  • 318e1db on `zx`, we have `minimist`
  • a4a654b avoid ignore of some required results
  • d411956 some stylistic changes
  • ba77390 add a note
  • 256a143 unify some compat tests runners
  • 5380564 add Rhino compat tests runner
  • 02c82ab fix a typo in docs
  • 468e18f add difference to compat tests output
  • f788820 actualize Rhino compat data
  • 5bf5188 actualize Rhino compat data
  • d23809e Merge pull request #1075 from ImanSharaf/patch-1
  • 4aaf69b Update usage.mjs
  • f8482ae simplify `define-built-in-accessor`

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

snyk-bot avatar May 26 '22 11:05 snyk-bot

Deploy Preview for mlops-toys ready!

Name Link
Latest commit 97d3b1d6955e86e6a70ab0959ab2c740c0988110
Latest deploy log https://app.netlify.com/sites/mlops-toys/deploys/628f6123dd402d000842391f
Deploy Preview https://deploy-preview-93--mlops-toys.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

netlify[bot] avatar May 26 '22 11:05 netlify[bot]