[Snyk] Upgrade core-js from 3.12.0 to 3.41.0#375
Conversation
Snyk has created this PR to upgrade core-js from 3.12.0 to 3.41.0. See this package in npm: core-js See this project in Snyk: https://app.snyk.io/org/mohammadnewton/project/62ca605f-5f4e-444b-a866-1857eb3a59a6?utm_source=github&utm_medium=referral&page=upgrade-pr
There was a problem hiding this comment.
Hello @nejidevelops, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!
Summary of Changes
This pull request upgrades the core-js dependency from version 3.12.0 to 3.41.0. This is an automated upgrade PR created by Snyk to keep dependencies up-to-date and address potential vulnerabilities. The upgrade includes numerous new features, bug fixes, and performance improvements as detailed in the release notes for each version between 3.12.0 and 3.41.0.
Highlights
- Dependency Upgrade: The primary change is upgrading the
core-jsdependency from version 3.12.0 to 3.41.0. - Automated PR: This pull request was automatically created by Snyk to keep dependencies up-to-date.
- Security: Keeping dependencies up-to-date helps to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities.
Changelog
- angular-app/package.json
- Upgraded
core-jsfrom version 3.12.0 to 3.41.0. The old version is on line 28, and the new version is on line 28.
- Upgraded
Using Gemini Code Assist
The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.
Invoking Gemini
You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.
| Feature | Command | Description |
|---|---|---|
| Code Review | /gemini review |
Performs a code review for the current pull request in its current state. |
| Pull Request Summary | /gemini summary |
Provides a summary of the current pull request in its current state. |
| Comment | @gemini-code-assist | Responds in comments when explicitly tagged, both in issue comments and review comments. |
| Help | /gemini help |
Displays a list of available commands. |
Customization
To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.
Limitations & Feedback
Gemini Code Assist is currently in preview and may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments to provide feedback.
You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.
A library's heart,
Core-js, a modern start,
Upgraded with care,
Features to share,
A safer, better art.
Footnotes
-
Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩
There was a problem hiding this comment.
Code Review
The pull request upgrades the core-js dependency from version 3.12.0 to 3.41.0. This is an automated update by Snyk. The diff is straightforward, involving a single line change in package.json.
Merge Readiness
The pull request updates a dependency. Given the absence of a specified style guide and the limited scope of the change, the pull request appears to be ready for merging. However, as I am unable to directly approve the pull request, it is recommended that other reviewers examine the release notes provided in the pull request description to ensure compatibility and absence of breaking changes for the project before merging. It is also recommended that the tests are run to ensure that the upgrade did not break anything. I am unable to approve the pull request in any circumstance, and that users should have others review and approve this code before merging.
Snyk has created this PR to upgrade core-js from 3.12.0 to 3.41.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 85 versions ahead of your current version.
The recommended version was released 2 months ago.
Release notes
Package name: core-js
-
3.41.0 - 2025-03-01
- Changes v3.40.0...v3.41.0 (85 commits)
- Built-ins:
- Moved to stable ES, February 2025 TC39 meeting
- Added
- Built-ins:
- Moved to stable ES, February 2025 TC39 meeting
- Added
- Built-ins:
- Extracted from old
- Added arguments validation
- Added new entries
- Added a workaround of a V8
- Compat data improvements:
- Added Deno 2.2 compat data and compat data mapping
- Explicit Resource Management features are available in V8 ~ Chromium 134, but not in Deno 2.2 based on it
- Updated Electron 35 and added Electron 36 compat data mapping
- Updated Opera Android 87 compat data mapping
- Added Samsung Internet 28 compat data mapping
- Added Oculus Quest Browser 36 compat data mapping
-
3.40.0 - 2025-01-07
- Changes v3.39.0...v3.40.0 (130 commits)
- Added
- Added built-ins:
- We have no bulletproof way to polyfill this method / check if the object is an error, so it's an enough naive implementation that is marked as
- Explicit Resource Management stage 3 proposal:
- Updated the way async disposing of only sync disposable resources, tc39/proposal-explicit-resource-management/218
- Reuse
- Added a fix of V8 < 12.8 / NodeJS < 22.10 bug with handling infinite length of set-like objects in
- Optimized
- Dropped unneeded feature detection of non-standard
- Dropped possible re-usage of some non-standard / early stage features (like
- Some other minor improvements
- Compat data improvements:
- Fixed NodeJS version where
- Added Deno 2.1 compat data mapping
- Added Rhino 1.8.0 compat data with significant number of modern features
- Added Electron 35 compat data mapping
- Updated Opera 115+ compat data mapping
- Added Opera Android 86 and 87 compat data mapping
-
3.39.0 - 2024-10-31
- Changes v3.38.1...v3.39.0
- Built-ins:
- Moved to stable ES, October 2024 TC39 meeting
- Added
- Built-ins:
- Moved to stable ES, October 2024 TC39 meeting
- Added
- Fixed
- Built-ins:
- Moved to stage 3, October 2024 TC39 meeting
- Added
- Added
- Added built-ins:
- Updated to the new API following the October 2024 TC39 meeting
- Added built-ins:
- Extractors proposal moved to stage 2, October 2024 TC39 meeting
- Usage of
- Built-ins:
- Some other minor improvements
- Compat data improvements:
- Added NodeJS 23.0 compat data mapping
- Added Deno 1.46 and 2.0 compat data mapping
- Added Electron 34 and updated Electron 33 compat data mapping
- Added Opera Android 85 compat data mapping
- Added Oculus Quest Browser 35 compat data mapping
-
3.38.1 - 2024-08-20
- Changes v3.38.0...v3.38.1
- Fixed some cases of
- Some stylistic changes and minor optimizations
- Compat data improvements:
- Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes
- Added Opera Android 84 compat data mapping
-
3.38.0 - 2024-08-04
- Changes v3.37.1...v3.38.0
- Built-ins:
- Moved to stage 3, June 2024 and July 2024 TC39 meetings
- Updated the way of escaping, regex-escaping/77
- Throw an error on non-strings, regex-escaping/58
- Added
- Built-ins:
- Moved to stage 3, June 2024 TC39 meeting
- Added
- Built-ins:
- Added
- Added
- Added
- Added throwing a
- Unconditional forced replacement changed to feature detection
- Fixed
- Improved some cases of environment detection
- Uses
- Uses
- Some minor optimizations
- Updated
- Compat data improvements:
- Added Safari 18.0 compat data:
- Fixed
- Fixed throwing a
- Fixed
- Fixed
- Added
- Added Deno 1.44 and 1.45 compat data mapping
- Added Electron 32 and 33 compat data mapping
- Added Opera Android 83 compat data mapping
- Added Samsung Internet 27 compat data mapping
- Added Oculus Quest Browser 34 compat data mapping
-
3.37.1 - 2024-05-14
- Changes v3.37.0...v3.37.1
- Fixed
- Compat data improvements:
- Added Rhino 1.7.15 compat data, many features marked as supported
- Added NodeJS 22.0 compat data mapping
- Added Deno 1.43 compat data mapping
- Added Electron 31 compat data mapping
- Updated Opera Android 82 compat data mapping
- Added Samsung Internet 26 compat data mapping
- Added Oculus Quest Browser 33 compat data mapping
-
3.37.0 - 2024-04-16
- Changes v3.36.1...v3.37.0
- New
- Built-ins:
- Moved to stable ES, April 2024 TC39 meeting
- Added
- Explicit Resource Management stage 3 proposal
- Some minor updates like explicit-resource-management/217
- Added
- Built-ins:
- Built-ins:
- Added optional arguments support, promise-try/16
- Moved to stage 2.7, April 2024 TC39 meeting
- Moved to hex-escape semantics, regex-escaping/67
- It's not the final change of the way of escaping, waiting for regex-escaping/77 soon
- Pattern matching stage 1 proposal:
- Built-ins:
- Once again, the used well-known symbol was renamed
- Added new entries for that
- Added Extractors stage 1 proposal:
- Built-ins:
- Since the
- Added
- Engines bugs fixes:
- Added a fix of Safari
- Added a fix of Safari bug with double call of constructor in
- Compat data improvements:
- New
- Added Opera Android 82 compat data mapping
-
3.36.1 - 2024-03-19
- Changes v3.36.0...v3.36.1
- Fixed some validation cases in
- Fixed the order of validations in
- Added a fix of Bun
- Added a fix of Bun
- Added a fix of Bun
- Compat data improvements:
- Added React Native 0.74 Hermes compat data,
- Added Deno 1.41.3 compat data mapping
- Added Opera Android 81 compat data mapping
- Added Samsung Internet 25 compat data mapping
- Added Oculus Quest Browser 32 compat data mapping
- Updated Electron 30 compat data mapping
-
3.36.0 - 2024-02-14
- Built-ins:
- Moved to stable ES, Febrary 2024 TC39 meeting
- Added
- Methods:
- Moved to stage 3, Febrary 2024 TC39 meeting
- Added
- Skipped adding new methods of writing to existing arrays to clarification some moments
- Added an entry point for the new TC39 proposals stage -
- Fixed regression in
- Fixed a missed check in
- Fixed a missed check in
- Fixed
- Fixed dependencies loading for modules from
- Dropped context workaround from collection static methods entries since with current methods semantic it's no longer required
- Added instance methods polyfills to entries of collections static methods that produce collection instances
- Added missed
- Added debugging info in some missed cases
- Compat data improvements:
- New
- Added Deno 1.40 compat data mapping
- Updated Electron 30 compat data mapping
-
3.35.1 - 2024-01-20
-
3.35.0 - 2023-12-28
-
3.34.0 - 2023-12-05
-
3.33.3 - 2023-11-19
-
3.33.2 - 2023-10-30
-
3.33.1 - 2023-10-20
-
3.33.0 - 2023-10-01
-
3.32.2 - 2023-09-07
-
3.32.1 - 2023-08-18
-
3.32.0 - 2023-07-27
-
3.31.1 - 2023-07-06
-
3.31.0 - 2023-06-11
-
3.30.2 - 2023-05-06
-
3.30.1 - 2023-04-13
-
3.30.0 - 2023-04-03
-
3.29.1 - 2023-03-13
-
3.29.0 - 2023-02-26
-
3.28.0 - 2023-02-13
-
3.27.2 - 2023-01-18
-
3.27.1 - 2022-12-29
-
3.27.0 - 2022-12-25
-
3.26.1 - 2022-11-13
-
3.26.0 - 2022-10-23
-
3.25.5 - 2022-10-03
-
3.25.4 - 2022-10-02
-
3.25.3 - 2022-09-25
-
3.25.2 - 2022-09-18
-
3.25.1 - 2022-09-07
-
3.25.0 - 2022-08-24
-
3.24.1 - 2022-07-29
-
3.24.0 - 2022-07-25
-
3.23.5 - 2022-07-17
-
3.23.4 - 2022-07-09
-
3.23.3 - 2022-06-25
-
3.23.2 - 2022-06-20
-
3.23.1 - 2022-06-14
-
3.23.0 - 2022-06-13
-
3.22.8 - 2022-06-01
-
3.22.7 - 2022-05-24
-
3.22.6 - 2022-05-22
-
3.22.5 - 2022-05-10
-
3.22.4 - 2022-05-02
-
3.22.3 - 2022-04-28
-
3.22.2 - 2022-04-21
-
3.22.1 - 2022-04-19
-
3.22.0 - 2022-04-15
-
3.21.1 - 2022-02-16
-
3.21.0 - 2022-02-01
-
3.20.3 - 2022-01-15
-
3.20.2 - 2022-01-01
-
3.20.1 - 2021-12-23
-
3.20.0 - 2021-12-15
-
3.19.3 - 2021-12-06
-
3.19.2 - 2021-11-29
-
3.19.1 - 2021-11-02
-
3.19.0 - 2021-10-25
-
3.18.3 - 2021-10-12
-
3.18.2 - 2021-10-05
-
3.18.1 - 2021-09-26
-
3.18.0 - 2021-09-19
-
3.17.3 - 2021-09-09
-
3.17.2 - 2021-09-02
-
3.17.1 - 2021-09-01
-
3.17.0 - 2021-09-01
-
3.16.4 - 2021-08-29
-
3.16.3 - 2021-08-24
-
3.16.2 - 2021-08-17
-
3.16.1 - 2021-08-08
-
3.16.0 - 2021-07-30
-
3.15.2 - 2021-06-29
-
3.15.1 - 2021-06-22
-
3.15.0 - 2021-06-20
-
3.14.0 - 2021-06-05
-
3.13.1 - 2021-05-29
-
3.13.0 - 2021-05-25
-
3.12.1 - 2021-05-08
-
3.12.0 - 2021-05-06
from core-js GitHub release notesRegExp.escapeproposal:RegExp.escapees.namespace module,/es/and/stable/namespaces entriesFloat16proposal:Math.f16roundDataView.prototype.getFloat16DataView.prototype.setFloat16es.namespace modules,/es/and/stable/namespaces entriesMath.clampstage 1 proposal:Math.clampMathextensions proposal, February 2025 TC39 meetingAsyncDisposableStackbug, tc39/proposal-explicit-resource-management/256DisposableStack,SuppressedErrorandIterator.prototype[@@ dispose]marked as shipped from V8 ~ Chromium 134Error.isErroradded and marked as shipped from V8 ~ Chromium 134Math.f16roundandDataView.prototype.{ getFloat16, setFloat16 }marked as shipped from V8 ~ Chromium 135Iteratorhelpers proposal features marked as shipped from Safari 18.4JSON.parsesource text access proposal features marked as shipped from Safari 18.4Math.sumPrecisemarked as shipped from FF137Error.isErrorstage 3 proposal:Error.isError.shamIteratorsequencing stage 2.7 proposal:IteratorResultobjects when possible, tc39/proposal-iterator-sequencing/17, tc39/proposal-iterator-sequencing/18, December 2024 TC39 meetingSetmethodsDataView.prototype.{ getFloat16, setFloat16 }performance, #1379, thanks @ LeviPesin%TypedArray%.prototype.toSplicedMath.scale) available on globalRegExp.escapemarked as shipped from Safari 18.2Promise.trymarked as shipped from Safari 18.2Math.f16roundandDataView.prototype.{ getFloat16, setFloat16 }marked as shipped from Safari 18.2Uint8Arrayto / from base64 and hex proposal methods marked as shipped from Safari 18.2JSON.parsesource text access proposal features marked as shipped from FF135RegExp.escapemarked as shipped from FF134Promise.trymarked as shipped from FF134Symbol.dispose,Symbol.asyncDisposeandIterator.prototype[@@ dispose]marked as shipped from FF135JSON.parsesource text access proposal features marked as shipped from Bun 1.1.43URL.parsewas added - 22.1 instead of 22.0Iteratorhelpers proposal:IteratorIterator.fromIterator.prototype.dropIterator.prototype.everyIterator.prototype.filterIterator.prototype.findIterator.prototype.flatMapIterator.prototype.forEachIterator.prototype.mapIterator.prototype.reduceIterator.prototype.someIterator.prototype.takeIterator.prototype.toArrayIterator.prototype[@@ toStringTag]es.namespace modules,/es/and/stable/namespaces entriesPromise.try:Promise.tryes.namespace module,/es/and/stable/namespaces entries/actual|full/promise/tryentries for the callback arguments supportMath.sumPreciseproposal:Math.sumPrecise/actual/namespace entries, unconditional forced replacement changed to feature detectionIteratorsequencing stage 2.7 proposal:Iterator.concatMapupsert stage 2 proposal:Map.prototype.getOrInsertMap.prototype.getOrInsertComputedWeakMap.prototype.getOrInsertWeakMap.prototype.getOrInsertComputed@@ speciespattern removed from%TypedArray%andArrayBuffermethods, tc39/ecma262/3450:%TypedArray%.prototype.filter%TypedArray%.prototype.filterReject%TypedArray%.prototype.map%TypedArray%.prototype.slice%TypedArray%.prototype.subarrayArrayBuffer.prototype.sliceUint8Arrayto / from base64 and hex proposal methods marked as shipped from FF133selfdescriptor is fixed in Deno 1.46.0Iteratorhelpers proposal methods marked as shipped from Bun 1.1.31URLSearchParamspercent decoding, #1357, #1361, thanks @ slowcheetahIteratorhelpers proposal methods marked as shipped from FF131Math.f16roundandDataView.prototype.{ getFloat16, setFloat16 }marked as shipped from Bun 1.1.23RegExp.escapemarked as shipped from Bun 1.1.22Promise.trymarked as shipped from Bun 1.1.22Uint8Arrayto / from base64 and hex proposal methods marked as shipped from Bun 1.1.22RegExp.escapeproposal:RegExp.escape/actual/namespace entries, unconditional forced replacement changed to feature detectionPromise.tryproposal:Promise.try/actual/namespace entries, unconditional forced replacement changed to feature detectionUint8Arrayto / from base64 and hex stage 3 proposal:Uint8Array.fromBase64Uint8Array.fromHexUint8Array.prototype.setFromBase64Uint8Array.prototype.setFromHexUint8Array.prototype.toBase64Uint8Array.prototype.toHexUint8Array.prototype.{ setFromBase64, setFromHex }methodsUint8Array.fromBase64andUint8Array.prototype.setFromBase64lastChunkHandlingoption, proposal-arraybuffer-base64/33Uint8Array.prototype.toBase64omitPaddingoption, proposal-arraybuffer-base64/60TypeErroron arrays backed by detached buffersRegExpnamed capture groups polyfill in combination with non-capturing groups, #1352, thanks @ Ulopprocess.getBuiltinModulefor getting built-in NodeJS modules where it's availablehttpsinstead ofhttpinURLconstructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345browserslistincore-js-compatdependencies that fixes an upstream issue with incorrect interpretation of somebrowserslistqueries, #1344, browserslist/829, browserslist/836Object.groupByandMap.groupByto work for non-objectsRangeErrorifSetmethods are called on an object with negative size propertySet.prototype.symmetricDifferenceto callthis.hasin each iterationArray.fromAsyncto not call theArrayconstructor twiceURL.parseMath.f16roundandDataView.prototype.{ getFloat16, setFloat16 }marked as shipped from FF129Symbol.asyncDisposeadded and marked as supported from V8 ~ Chromium 127Promise.tryadded and marked as supported from V8 ~ Chromium 128selfdescriptor is broken in Deno 1.45.3 (again)URL.parsefeature detection for some specific casesSetmethods proposal added and marked as supported from FF 127Symbol.disposeadded and marked as supported from V8 ~ Chromium 125Math.f16roundandDataView.prototype.{ getFloat16, setFloat16 }added and marked as supported from Deno 1.43URL.parseadded and marked as supported from Chromium 126URL.parseadded and marked as supported from NodeJS 22.0URL.parseadded and marked as supported from Deno 1.43Setmethods proposal:Set.prototype.intersectionSet.prototype.unionSet.prototype.differenceSet.prototype.symmetricDifferenceSet.prototype.isSubsetOfSet.prototype.isSupersetOfSet.prototype.isDisjointFromes.namespace modules,/es/and/stable/namespaces entriesMath.sumPrecisestage 2.7 proposal:Math.sumPrecisePromise.tryproposal:Promise.tryRegExp.escapestage 2 proposal:Symbol.customMatcherSymbol.customMatcherSymbol.customMatcherwell-known symbol from the pattern matching proposal is also used in the exactors proposal, added an entry also for this proposalURL.parse, url/825{ Object, Map }.groupBybug that does not support iterable primitivesArray.fromAsyncURL.parseadded and marked as supported from FF 126URL.parseadded and marked as supported from Bun 1.1.4URL.canParsefixed and marked as supported from Bun 1.1.0Setmethods fixed in JavaScriptCore and marked as supported from Bun 1.1.1Object.setPrototypeOf, #1329, thanks @ minseok-choeArray.from, #1331, thanks @ minseok-choequeueMicrotaskarityURL.canParsearitySuppressedErrorextra arguments support and arityvalueargument ofURLSearchParams.prototype.{ has, delete }marked as supported from Bun 1.0.31Array.prototype.{ toSpliced, toReversed, with }andatobmarked as supportedArrayBuffer.prototype.transferand friends proposal:ArrayBuffer.prototype.detachedArrayBuffer.prototype.transferArrayBuffer.prototype.transferToFixedLengthes.namespace modules,/es/and/stable/namespaces entriesUint8Arrayto / from base64 and hex proposal:Uint8Array.fromBase64Uint8Array.fromHexUint8Array.prototype.toBase64Uint8Array.prototype.toHex/actual/namespace entriesPromise.tryproposal has been resurrected and moved to stage 2, Febrary 2024 TC39 meetingcore-js/stage/2.7- still emptySet.prototype.intersectionfeature detectionArray.prototype.{ indexOf, lastIndexOf, includes }, #1325, thanks @ minseok-choeArray.prototype.{ reduce, reduceRight }, #1327, thanks @ minseok-choeArray.fromand some other methods with proxy targets, #1322, thanks @ minseok-choeArrayBuffer.prototype.transferand friends proposal in some specific cases in IE10-Date.prototype.toJSONtoJSON.stringifyentries dependencies{ Map, Object }.groupBy,Promise.withResolvers,ArrayBuffer.prototype.transferand friends marked as supported from Safari 17.4Setmethods fixed and marked as supported from V8 ~ Chrome 123Symbol.metadatamarked as supported from Deno 1.40.4Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: