Skip to content

[Snyk] Upgrade core-js from 3.22.8 to 3.25.2

Created by: snyk-bot

Snyk has created this PR to upgrade core-js from 3.22.8 to 3.25.2.

merge advice Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 11 versions ahead of your current version.
  • The recommended version was released 25 days ago, on 2022-09-18.
Release notes
Package name: core-js
  • 3.25.2 - 2022-09-18
    • Considering document.all as a callable in some missed cases
    • Added Safari 16.0 compat data
    • Added iOS Safari 16.0 compat data mapping
    • Fixed some ancient iOS Safari versions compat data mapping
  • 3.25.1 - 2022-09-07
    • Added some fixes and workarounds of FF30- typed arrays bug that does not properly convert objects to numbers
    • Added sideEffects field to core-js-pure package.json for better tree shaking, #1117
    • Dropped semver dependency from core-js-compat
      • semver package (ironically) added a breaking change and dropped NodeJS 8 support in the minor 7.1 version, after that semver in core-js-compat was pinned to 7.0 since for avoiding breaking changes it should support NodeJS 8. However, since core-js-compat is usually used with other packages that use semver dependency, it causes multiple duplications of semver in dependencies. So I decided to remove semver dependency and replace it with a couple of simple helpers.
    • Added Bun 0.1.6-0.1.11 compat data
    • Added Deno 1.25 compat data mapping
    • Updated Electron 21 compat data mapping
    • Some stylistic changes, minor fixes, and improvements
  • 3.25.0 - 2022-08-24
    • Added Object.prototype.__proto__ polyfill
      • It's optional, legacy, and in some cases (mainly because of developers' mistakes) can cause problems, but some libraries depend on it, and most code can't work without the proper libraries' ecosystem
      • Only for modern engines where this feature is missed (like Deno), it's not installed in IE10- since here we have no proper way setting of the prototype
      • Without fixes of early implementations where it's not an accessor since those fixes are impossible
      • Only for the global version
    • Considering document.all as an object in some missed cases, see ECMAScript Annex B 3.6
    • Avoiding unnecessary promise creation and validation result in %WrapForValid(Async)IteratorPrototype%.return, proposal-iterator-helpers/215
    • Fixed omitting the result of proxing .return in %IteratorHelperPrototype%.return, #1116
    • Fixed the order creation of properties of iteration result object of some iterators (value should be created before done)
    • Fixed some cases of Safari < 13 bug - silent on non-writable array .length setting
    • Fixed ArrayBuffer.length in V8 ~ Chrome 27-
    • Relaxed condition of re-usage native WeakMap for internal states with multiple core-js copies
    • Availability cloning of FileList in the structuredClone polyfill extended to some more old engines versions
    • Some stylistic changes and minor fixes
    • Throwing a TypeError in core-js-compat / core-js-builder in case of passing invalid module names / filters for avoiding unexpected result, related to #1115
    • Added missed NodeJS 13.2 to esmodules core-js-compat / core-js-builder target
    • Added Electron 21 compat data mapping
    • Added Oculus Browser 23.0 compat data mapping
  • 3.24.1 - 2022-07-29
    • NodeJS is ignored in IS_BROWSER detection to avoid a false positive with jsdom, #1110
    • Fixed detection of @@ species support in Promise in some old engines
    • { Array, %TypedArray% }.prototype.{ findLast, findLastIndex } marked as shipped in FF104
    • Added iOS Safari 15.6 compat data mapping
    • Fixed Opera 15 compat data mapping
  • 3.24.0 - 2022-07-25
  • 3.23.5 - 2022-07-17
    • Fixed a typo in the structuredClone feature detection, #1106
    • Added Opera Android 70 compat data mapping
  • 3.23.4 - 2022-07-09
    • Added a workaround of the Bun ~ 0.1.1 bug that define some globals with incorrect property descriptors and that causes a crash of core-js
    • Added a fix of the FF103+ structuredClone bugs (1774866 (fixed in FF104) and 1777321 (still not fixed)) that now can clone errors, but .stack of the clone is an empty string
    • Fixed { Map, WeakMap }.prototype.emplace logic, #1102
    • Fixed order of errors throwing on iterator helpers
  • 3.23.3 - 2022-06-25
  • 3.23.2 - 2022-06-20
    • Avoided creation of extra properties for the handling of %TypedArray% constructors in new methods, #1092 (comment)
    • Added Deno 1.23 compat data mapping
  • 3.23.1 - 2022-06-14
    • Fixed possible error on multiple core-js copies, #1091
    • Added v flag to RegExp.prototype.flags implementation in case if current V8 bugs will not be fixed before this flag implementation
  • 3.23.0 - 2022-06-13
  • 3.22.8 - 2022-06-01
from core-js GitHub release notes
Commit messages
Package name: core-js
  • 77771c7 3.25.2
  • f763148 some stylistic changes
  • 423b9b5 update a link to example
  • 061ac36 fix some links
  • 774a6be remove some extra badges
  • cea7d25 update `Set` methods documentation for consistency with updated proposal
  • 841261d update `Set` methods documentation for consistency with updated proposal
  • 23b9d30 centring badges in missed cases
  • 404d65e update dependencies
  • d1ddbfc improve some docs
  • 8f64706 consider `document.all` as a callable in some missed cases
  • 9448724 change the way of iOS compat data validation
  • 2f9ca58 fix ancient iOS Safari versions compat data mapping
  • 36ca26c update dependencies
  • c8f73d0 some `eslint` config fixes
  • 372de9c consider iOS Safari 15+ version similar to the desktop version unless explicitly stated otherwise
  • f83b41a add Safari 16.0 / iOS 16.0 compat data
  • 7a95815 revert the previous commit, wrong branch
  • c3414fd update the changelog
  • 2fbd783 move some tests to `assert/strict`
  • b243b0b fix linting
  • 8f4ea36 simplify a script
  • 30d9d92 remove unnecessary global
  • 3c2e601 3.25.1

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Merge request reports