[Snyk] Upgrade: vue, vue-template-compiler, , , vuetify, , core-js, webpack, vue-server-renderer, nuxt #307

BitcoinOutput · 2024-09-08T00:44:11Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

vue
from 2.7.13 to 2.7.16 | 5 versions ahead of your current version | 8 months ago
on 2023-12-24
vue-template-compiler
from 2.7.13 to 2.7.16 | 5 versions ahead of your current version | 8 months ago
on 2023-12-24
@types/node
from 18.11.4 to 18.19.44 | 138 versions ahead of your current version | a month ago
on 2024-08-09
@nuxtjs/dotenv
from 1.4.1 to 1.4.2 | 1 version ahead of your current version | 9 months ago
on 2023-12-15
vuetify
from 2.6.12 to 2.7.2 | 7 versions ahead of your current version | 7 months ago
on 2024-02-14
@vue/reactivity
from 3.2.41 to 3.4.38 | 88 versions ahead of your current version | 24 days ago
on 2024-08-15
core-js
from 3.26.0 to 3.38.0 | 27 versions ahead of your current version | a month ago
on 2024-08-04
webpack
from 4.46.0 to 4.47.0 | 1 version ahead of your current version | a year ago
on 2023-09-06
vue-server-renderer
from 2.7.13 to 2.7.16 | 5 versions ahead of your current version | 8 months ago
on 2023-12-24
nuxt
from 2.15.8 to 2.18.1 | 11 versions ahead of your current version | 2 months ago
on 2024-06-28

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577916	776	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577917	776	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-7577918	776	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	776	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-BROWSERIFYSIGN-6037026	776	No Known Exploit
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	776	Proof of Concept
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	776	No Known Exploit
Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	776	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	776	Proof of Concept
Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	776	Proof of Concept
Denial of Service (DoS) SNYK-JS-WS-7266574	776	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	776	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	776	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	776	Proof of Concept
Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	776	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	776	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	776	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	776	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	776	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	776	No Known Exploit
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	776	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	776	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	776	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HTMLMINIFIER-3091181	776	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-3244450	776	Proof of Concept

Release notes

Package name: vue

2.7.16 - 2023-12-24
2.7.16-beta.2 - 2023-12-14
2.7.16-beta.1 - 2023-12-08
2.7.15 - 2023-10-23
2.7.14 - 2022-11-09
2.7.13 - 2022-10-14

from vue GitHub release notes

Package name: vue-template-compiler

2.7.16 - 2023-12-24
This is the final release for Vue 2.

Vue 2 will reach End of Life on December 31st, 2023. For more details, please read this blog post.

Please refer to CHANGELOG.md for details.
2.7.16-beta.2 - 2023-12-14
Please refer to CHANGELOG.md for details.
2.7.16-beta.1 - 2023-12-08
Please refer to CHANGELOG.md for details.
2.7.15 - 2023-10-23
Please refer to CHANGELOG.md for details.
2.7.14 - 2022-11-09
Please refer to CHANGELOG.md for details.
2.7.13 - 2022-10-14
Please refer to CHANGELOG.md for details.

from vue-template-compiler GitHub release notes

Package name: @types/node

18.19.44 - 2024-08-09
18.19.43 - 2024-08-02
18.19.42 - 2024-07-23
18.19.41 - 2024-07-18
18.19.40 - 2024-07-16
18.19.39 - 2024-06-22
18.19.38 - 2024-06-20
18.19.37 - 2024-06-19
18.19.36 - 2024-06-17
18.19.35 - 2024-06-17
18.19.34 - 2024-06-03
18.19.33 - 2024-05-08
18.19.32 - 2024-05-06
18.19.31 - 2024-04-09
18.19.30 - 2024-04-05
18.19.29 - 2024-04-02
18.19.28 - 2024-03-30
18.19.27 - 2024-03-30
18.19.26 - 2024-03-19
18.19.25 - 2024-03-18
18.19.24 - 2024-03-13
18.19.23 - 2024-03-11
18.19.22 - 2024-03-06
18.19.21 - 2024-02-29
18.19.20 - 2024-02-28
18.19.19 - 2024-02-27
18.19.18 - 2024-02-22
18.19.17 - 2024-02-15
18.19.16 - 2024-02-15
18.19.15 - 2024-02-08
18.19.14 - 2024-02-01
18.19.13 - 2024-02-01
18.19.12 - 2024-01-31
18.19.11 - 2024-01-30
18.19.10 - 2024-01-26
18.19.9 - 2024-01-24
18.19.8 - 2024-01-17
18.19.7 - 2024-01-15
18.19.6 - 2024-01-09
18.19.5 - 2024-01-07
18.19.4 - 2023-12-30
18.19.3 - 2023-12-07
18.19.2 - 2023-12-03
18.19.1 - 2023-12-01
18.19.0 - 2023-11-30
18.18.14 - 2023-11-29
18.18.13 - 2023-11-23
18.18.12 - 2023-11-22
18.18.11 - 2023-11-21
18.18.10 - 2023-11-18
18.18.9 - 2023-11-07
18.18.8 - 2023-10-31
18.18.7 - 2023-10-25
18.18.6 - 2023-10-18
18.18.5 - 2023-10-12
18.18.4 - 2023-10-06
18.18.3 - 2023-10-02
18.18.2 - 2023-10-02
18.18.1 - 2023-09-29
18.18.0 - 2023-09-25
18.17.19 - 2023-09-23
18.17.18 - 2023-09-20
18.17.17 - 2023-09-16
18.17.16 - 2023-09-15
18.17.15 - 2023-09-08
18.17.14 - 2023-09-02
18.17.13 - 2023-09-01
18.17.12 - 2023-08-28
18.17.11 - 2023-08-24
18.17.10 - 2023-08-24
18.17.9 - 2023-08-23
18.17.8 - 2023-08-22
18.17.7 - 2023-08-22
18.17.6 - 2023-08-18
18.17.5 - 2023-08-11
18.17.4 - 2023-08-08
18.17.3 - 2023-08-05
18.17.2 - 2023-08-04
18.17.1 - 2023-07-25
18.17.0 - 2023-07-22
18.16.20 - 2023-07-21
18.16.19 - 2023-06-30
18.16.18 - 2023-06-13
18.16.17 - 2023-06-10
18.16.16 - 2023-05-26
18.16.15 - 2023-05-25
18.16.14 - 2023-05-21
18.16.13 - 2023-05-18
18.16.12 - 2023-05-16
18.16.11 - 2023-05-16
18.16.10 - 2023-05-16
18.16.9 - 2023-05-13
18.16.8 - 2023-05-11
18.16.7 - 2023-05-10
18.16.6 - 2023-05-08
18.16.5 - 2023-05-05
18.16.4 - 2023-05-05
18.16.3 - 2023-04-29
18.16.2 - 2023-04-27
18.16.1 - 2023-04-25
18.16.0 - 2023-04-23
18.15.13 - 2023-04-21
18.15.12 - 2023-04-19
18.15.11 - 2023-03-28
18.15.10 - 2023-03-25
18.15.9 - 2023-03-25
18.15.8 - 2023-03-24
18.15.7 - 2023-03-24
18.15.6 - 2023-03-23
18.15.5 - 2023-03-20
18.15.4 - 2023-03-20
18.15.3 - 2023-03-14
18.15.2 - 2023-03-13
18.15.1 - 2023-03-13
18.15.0 - 2023-03-09
18.14.6 - 2023-03-03
18.14.5 - 2023-03-03
18.14.4 - 2023-03-02
18.14.3 - 2023-03-02
18.14.2 - 2023-02-26
18.14.1 - 2023-02-23
18.14.0 - 2023-02-17
18.13.0 - 2023-02-07
18.11.19 - 2023-02-04
18.11.18 - 2022-12-26
18.11.17 - 2022-12-17
18.11.16 - 2022-12-16
18.11.15 - 2022-12-13
18.11.14 - 2022-12-13
18.11.13 - 2022-12-10
18.11.12 - 2022-12-08
18.11.11 - 2022-12-05
18.11.10 - 2022-11-30
18.11.9 - 2022-11-01
18.11.8 - 2022-10-30
18.11.7 - 2022-10-26
18.11.6 - 2022-10-26
18.11.5 - 2022-10-24
18.11.4 - 2022-10-23

from @types/node GitHub release notes

Package name: @nuxtjs/dotenv

1.4.2 - 2023-12-15
chore(release): 1.4.2
1.4.1 - 2019-09-13
chore(update): bump to 1.4.1

from @nuxtjs/dotenv GitHub release notes

Package name: vuetify

2.7.2 - 2024-02-14
🔧 Bug Fixes
- update types (#16951) (7e3d35d)
- check both $slots and $scopedSlots, normalise slot case (7d67046), closes #8676 #15293
- locale: Update French translations (#18215) (ceeafb6)
- VAutocomplete: highlight correct item in list on click (bc48f00), closes #17201
- VSelect: don't blur input on menu mousedown (0a77965), closes #15839
2.7.1 - 2023-08-09
2.7.0 - 2023-07-05
2.6.16 - 2023-07-05
2.6.15 - 2023-04-12
2.6.14 - 2023-01-10
2.6.13 - 2022-12-13
2.6.12 - 2022-10-18

from vuetify GitHub release notes

Package name: @vue/reactivity

3.4.38 - 2024-08-15
For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.
3.4.37 - 2024-08-08
For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.
3.4.36 - 2024-08-06
For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.
3.4.35 - 2024-07-31
For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.
3.4.34 - 2024-07-24
For stable releases, please refer to CHANGELOG.md for details.
For pre-releases, please refer to CHANGELOG.md of the minor branch.
3.4.33 - 2024-07-19
3.4.32 - 2024-07-17
3.4.31 - 2024-06-28
3.4.30 - 2024-06-22
3.4.29 - 2024-06-14
3.4.28 - 2024-06-14
3.4.27 - 2024-05-07
3.4.26 - 2024-04-29
3.4.25 - 2024-04-24
3.4.24 - 2024-04-22
3.4.23 - 2024-04-16
3.4.22 - 2024-04-15
3.4.21 - 2024-02-28
3.4.20 - 2024-02-26
3.4.19 - 2024-02-13
3.4.18 - 2024-02-09
3.4.17 - 2024-02-09
3.4.16 - 2024-02-08
3.4.15 - 2024-01-18
3.4.14 - 2024-01-15
3.4.13 - 2024-01-13
3.4.12 - 2024-01-13
3.4.11 - 2024-01-12
3.4.10 - 2024-01-11
3.4.9 - 2024-01-11
3.4.8 - 2024-01-10
3.4.7 - 2024-01-09
3.4.6 - 2024-01-08
3.4.5 - 2024-01-04
3.4.4 - 2024-01-03
3.4.3 - 2023-12-30
3.4.2 - 2023-12-30
3.4.1 - 2023-12-30
3.4.0 - 2023-12-29
3.4.0-rc.3 - 2023-12-27
3.4.0-rc.2 - 2023-12-26
3.4.0-rc.1 - 2023-12-25
3.4.0-beta.4 - 2023-12-19
3.4.0-beta.3 - 2023-12-16
3.4.0-beta.2 - 2023-12-14
3.4.0-beta.1 - 2023-12-13
3.4.0-alpha.4 - 2023-12-04
3.4.0-alpha.3 - 2023-11-28
3.4.0-alpha.2 - 2023-11-27
3.4.0-alpha.1 - 2023-10-28
3.3.13 - 2023-12-19
3.3.12 - 2023-12-16
3.3.11 - 2023-12-08
3.3.10 - 2023-12-04
3.3.9 - 2023-11-25
3.3.8 - 2023-11-06
3.3.7 - 2023-10-24
3.3.6 - 2023-10-20
3.3.5 - 2023-10-20
3.3.4 - 2023-05-18
3.3.3 - 2023-05-18
3.3.2 - 2023-05-12
3.3.1 - 2023-05-11
3.3.0 - 2023-05-11
3.3.0-beta.5 - 2023-05-08
3.3.0-beta.4 - 2023-05-05
3.3.0-beta.3 - 2023-05-01
3.3.0-beta.2 - 2023-04-25
3.3.0-beta.1 - 2023-04-21
3.3.0-alpha.13 - 2023-04-20
3.3.0-alpha.12 - 2023-04-18
3.3.0-alpha.11 - 2023-04-17
3.3.0-alpha.10 - 2023-04-17
3.3.0-alpha.9 - 2023-04-08
3.3.0-alpha.8 - 2023-04-04
3.3.0-alpha.7 - 2023-04-03
3.3.0-alpha.6 - 2023-03-30
3.3.0-alpha.5 - 2023-03-26
3.3.0-alpha.4 - 2023-02-06
3.3.0-alpha.3 - 2023-02-06
3.3.0-alpha.2 - 2023-02-05
3.3.0-alpha.1 - 2023-02-05
3.2.47 - 2023-02-02
3.2.46 - 2023-02-02
3.2.45 - 2022-11-11
3.2.44 - 2022-11-09
3.2.43 - 2022-11-09
3.2.42 - 2022-11-09
3.2.41 - 2022-10-14

from @vue/reactivity GitHub release notes

Package name: core-js

3.38.0 - 2024-08-04
- Changes v3.37.1...v3.38.0
- RegExp.escape proposal:
  - Built-ins:
    - RegExp.escape
  - Moved to stage 3, June 2024 and July 2024 TC39 meetings
  - Updated the way of escaping, regex-escaping/77
  - Throw an error on non-strings, regex-escaping/58
  - Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
- Promise.try proposal:
  - Built-ins:
    - Promise.try
  - Moved to stage 3, June 2024 TC39 meeting
  - Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
- Uint8Array to / from base64 and hex stage 3 proposal:
  - Built-ins:
    - Uint8Array.fromBase64
    - Uint8Array.fromHex
    - Uint8Array.prototype.setFromBase64
    - Uint8Array.prototype.setFromHex
    - Uint8Array.prototype.toBase64
    - Uint8Array.prototype.toHex
  - Added Uint8Array.prototype.{ setFromBase64, setFromHex } methods
  - Added Uint8Array.fromBase64 and Uint8Array.prototype.setFromBase64 lastChunkHandling option, proposal-arraybuffer-base64/33
  - Added Uint8Array.prototype.toBase64 omitPadding option, proposal-arraybuffer-base64/60
  - Added throwing a TypeError on arrays backed by detached buffers
  - Unconditional forced replacement changed to feature detection
- Fixed RegExp named capture groups polyfill in combination with non-capturing groups, #1352, thanks @ Ulop
- Improved some cases of environment detection
- Uses process.getBuiltinModule for getting built-in NodeJS modules where it's available
- Uses https instead of http in URL constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345
- Some minor optimizations
- Updated browserslist in core-js-compat dependencies that fixes an upstream issue with incorrect interpretation of some browserslist queries, #1344, browserslist/829, browserslist/836
- Compat data improvements:
  - Added Safari 18.0 compat data:
  - Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from FF129
  - Symbol.asyncDispose added and marked as supported from V8 ~ Chromium 127
  - Promise.try added and marked as supported from V8 ~ Chromium 128
  - Added Deno 1.44 and 1.45 compat data mapping
  - self descriptor is broken in Deno 1.45.3 (again)
  - Added Electron 32 and 33 compat data mapping
  - Added Opera Android 83 compat data mapping
  - Added Samsung Internet 27 compat data mapping
  - Added Oculus Quest Browser 34 compat data mapping
3.37.1 - 2024-05-14
- Changes v3.37.0...v3.37.1
- Fixed URL.parse feature detection for some specific cases
- Compat data improvements:
  - Set methods proposal added and marked as supported from FF 127
  - Symbol.dispose added and marked as supported from V8 ~ Chromium 125
  - Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } added and marked as supported from Deno 1.43
  - URL.parse added and marked as supported from Chromium 126
  - URL.parse added and marked as supported from NodeJS 22.0
  - URL.parse added and marked as supported from Deno 1.43
  - Added Rhino 1.7.15 compat data, many features marked as supported
  - Added NodeJS 22.0 compat data mapping
  - Added Deno 1.43 compat data mapping
  - Added Electron 31 compat data mapping
  - Updated Opera Android 82 compat data mapping
  - Added Samsung Internet 26 compat data mapping
  - Added Oculus Quest Browser 33 compat data mapping
3.37.0 - 2024-04-16
- Changes v3.36.1...v3.37.0
- New Set methods proposal:
  - Built-ins:
    - Set.prototype.intersection
    - Set.prototype.union
    - Set.prototype.difference
    - Set.prototype.symmetricDifference
    - Set.prototype.isSubsetOf
    - Set.prototype.isSupersetOf
    - Set.prototype.isDisjointFrom
  - Moved to stable ES, April 2024 TC39 meeting
  - Added es. namespace modules, /es/ and /stable/ namespaces entries
- Explicit Resource Management stage 3 proposal
  - Some minor updates like explicit-resource-management/217
- Added Math.sumPrecise stage 2.7 proposal:
  - Built-ins:
    - Math.sumPrecise
- Promise.try proposal:
  - Built-ins:
    - Promise.try
  - Added optional arguments support, promise-try/16
  - Moved to stage 2.7, April 2024 TC39 meeting
- RegExp.escape stage 2 proposal:
  - Moved to hex-escape semantics, regex-escaping/67
    - It's not the final change of the way of escaping, waiting for regex-escaping/77 soon
- Pattern matching stage 1 proposal:
  - Built-ins:
    - Symbol.customMatcher
  - Once again, the used well-known symbol was renamed
  - Added new entries for that
- Added Extractors stage 1 proposal:
  - Built-ins:
    - Symbol.customMatcher
  - Since the Symbol.customMatcher well-known symbol from the pattern matching proposal is also used in the exactors proposal, added an entry also for this proposal
- Added URL.parse, url/825
- Engines bugs fixes:
  - Added a fix of Safari { Object, Map }.groupBy bug that does not support iterable primitives
  - Added a fix of Safari bug with double call of constructor in Array.fromAsync
- Compat data improvements:
  - URL.parse added and marked as supported from FF 126
  - URL.parse added and marked as supported from Bun 1.1.4
  - URL.canParse fixed and marked as supported from Bun 1.1.0
  - New Set methods fixed in JavaScriptCore and marked as supported from Bun 1.1.1
  - Added Opera Android 82 compat data mapping
3.36.1 - 2024-03-19
- Changes v3.36.0...v3.36.1
- Fixed some validation cases in Object.setPrototypeOf, #1329, thanks @ minseok-choe
- Fixed the order of validations in Array.from, #1331, thanks @ minseok-choe
- Added a fix of Bun queueMicrotask arity
- Added a fix of Bun URL.canParse arity
- Added a fix of Bun SuppressedError extra arguments support and arity
- Compat data improvements:
  - value argument of URLSearchParams.prototype.{ has, delete } marked as supported from Bun 1.0.31
  - Added React Native 0.74 Hermes compat data, Array.prototype.{ toSpliced, toReversed, with } and atob marked as supported
  - Added Deno 1.41.3 compat data mapping
  - Added Opera Android 81 compat data mapping
  - Added Samsung Internet 25 compat data mapping
  - Added Oculus Quest Browser 32 compat data mapping
  - Updated Electron 30 compat data mapping
3.36.0 - 2024-02-14
- ArrayBuffer.prototype.transfer and friends proposal:
  - Built-ins:
    - ArrayBuffer.prototype.detached
    - ArrayBuffer.prototype.transfer
    - ArrayBuffer.prototype.transferToFixedLength
  - Moved to stable ES, Febrary 2024 TC39 meeting
  - Added es. namespace modules, /es/ and /stable/ namespaces entries
- Uint8Array to / from base64 and hex proposal:
  - Methods:
    - Uint8Array.fromBase64
    - Uint8Array.fromHex
    - Uint8Array.prototype.toBase64
    - Uint8Array.prototype.toHex
  - Moved to stage 3, Febrary 2024 TC39 meeting
  - Added /actual/ namespace entries
  - Skipped adding new methods of writing to existing arrays to clarification some moments
- Promise.try proposal has been resurrected and moved to stage 2, Febrary 2024 TC39 meeting
- Added an entry point for the new TC39 proposals stage - core-js/stage/2.7 - still empty
- Fixed regression in Set.prototype.intersection feature detection
- Fixed a missed check in Array.prototype.{ indexOf, lastIndexOf, includes }, #1325, thanks @ minseok-choe
- Fixed a missed check in Array.prototype.{ reduce, reduceRight }, #1327, thanks @ minseok-choe
- Fixed Array.from and some other methods with proxy targets, #1322, thanks @ minseok-choe
- Fixed dependencies loading for modules from ArrayBuffer.prototype.transfer and friends proposal in some specific cases in IE10-
- Dropped context workaround from collection static methods entries since with current methods semantic it's no longer required
- Added instance methods polyfills to entries of collections static methods that produce collection instances
- Added missed Date.prototype.toJSON to JSON.stringify entries dependencies
- Added debugging info in some missed cases
- Compat data improvements:
  - { Map, Object }.groupBy, Promise.withResolvers, ArrayBuffer.prototype.transfer and friends marked as supported from Safari 17.4
  - New Set methods fixed and marked as supported from V8 ~ Chrome 123
  - Added Deno 1.40 compat data mapping
  - Symbol.metadata marked as supported from Deno 1.40.4
  - Updated Electron 30 compat data mapping
3.35.1 - 2024-01-20
- Fixed internal ToLength operation with bigints, #1318
- Removed significant redundant code from String#split polyfill
- Fixed setting names of methods with symbol keys in some old engines
- Minor fix of prototype methods export logic in the pure version
- Compat data improvements:
  - Iterator helpers proposal methods marked as supported from V8 ~ Chrome 122
  - Note that V8 ~ Chrome 122 add Set methods, but they have a bug similar to Safari
  - self marked as fixed from Bun 1.0.22
  - SuppressedError and Symbol.{ dispose, asyncDispose } marked as supported from Bun 1.0.23
  - Added Oculus Quest Browser 31 compat data mapping
  - Updated Electron 29 and added Electron 30 compat data mapping
3.35.0 - 2023-12-28
- { Map, Set, WeakMap, WeakSet }.{ from, of } became non-generic, following this and some other notes. Now they can be invoked without this, but no longer return subclass instances
- Fixed handling some cases of non-enumerable symbol keys from Symbol polyfill
- Removed unneeded NodeJS domains-related logic from queueMicrotask polyfill
- Fixed subclassing of wrapped ArrayBuffer
- Refactoring, many different minor optimizations
- Compat data improvements:
  - Array.fromAsync marked as supported from V8 ~ Chrome 121
  - It seems that the ancient Array.prototype.push bug is fixed in V8 ~ Chrome 122 (Hallelujah!)
  - ArrayBuffer.prototype.transfer and friends proposal features marked as supported from FF 122 and Bun 1.0.19
  - Object.groupBy and Map.groupBy marked as supported from Bun 1.0.19
  - Since Iterator helpers proposal methods are still not disabled in Deno, the web compatibility issue why it was disabled in Chromium makes no sense for Deno and fixed in the spec, they marked as supported from Deno 1.37
  - Added Opera Android 80 and updated Opera Android 79 compat data mapping
  - Added Samsung Internet 24 compat data mapping
3.34.0 - 2023-12-05
- Array grouping proposal:
  - Methods:
    - Object.groupBy
    - Map.groupBy
  - Moved to stable ES, November 2023 TC39 meeting
  - Added es. namespace modules, /es/ and /stable/ namespaces entries
- Promise.withResolvers proposal:
  - Method:
    - Promise.withResolvers
  - Moved to stable ES, November 2023 TC39 meeting
  - Added es. namespace module, /es/ and /stable/ namespaces entries
- Fixed a web incompatibility issue of Iterator helpers proposal, proposal-iterator-helpers/287 and some following changes, November 2023 TC39 meeting
- Added Uint8Array to / from base64 and hex stage 2 proposal:
  - Methods:
    - Uint8Array.fromBase64
    - Uint8Array.fromHex
    - Uint8Array.prototype.toBase64
    - Uint8Array.prototype.toHex
- Relaxed some specific cases of Number.fromString validation before clarification of proposal-number-fromstring/24
- Fixed @@ toStringTag property descriptors on DOM collections, #1312
- Fixed the order of arguments validation in Array iteration methods, #1313
- Some minor atob / btoa improvements
- Compat data improvements:
  - Promise.withResolvers marked as shipped from FF121
3.33.3 - 2023-11-19
- Fixed an issue getting the global object on Duktape, #1303
- Avoid sharing internal [[DedentMap]] from String.dedent proposal between core-js instances before stabilization of the proposal
- Some internal untangling
- Compat data improvements:
  - Added Deno 1.38 compat data mapping
  - Array.fromAsync marked as supported from Deno 1.38
  - Symbol.{ dispose, asyncDispose } marked as supported from Deno 1.38
  - Added Opera Android 79 compat data mapping
  - Added Oculus Quest Browser 30 compat data mapping
  - Updated Electron 28 and 29 compat data mapping
3.33.2 - 2023-10-30
3.33.1 - 2023-10-20
3.33.0 - 2023-10-01
3.32.2 - 2023-09-07
3.32.1 - 2023-08-18
3.32.0 - 2023-07-27
3.31.1 - 2023-07-06
3.31.0 - 2023-06-11
3.30.2 - 2023-05-06
3.30.1 - 2023-04-13
3.30.0 - 2023-04-03
3.29.1 - 2023-03-13
3.29.0 - 2023-02-26
3.28.0 - 2023-02-13
3.27.2 - 2023-01-18
3.27.1 - 2022-12-29
3.27.0 - 2022-12-25
3.26.1 - 2022-11-13
3.26.0 - 2022-10-23

from core-js GitHub release notes

Package name: webpack

4.47.0 - 2023-09-06
New Features
- [Security] - Add support for md4 in Node >=18. by @ iclanton in #17628
New Contributors
- @ iclanton made their first contribution in #17628
Full Changelog: v4.46.0...v4.47.0
4.46.0 - 2021-01-11

from webpack GitHub release notes

Package name: vue-server-renderer

2.7.16 - 2023-12-24
This is the final release for Vue 2.

Vue 2 will reach End of Life on December 31st, 2023. For more details, please read this blog post.

Please refer to CHANGELOG.md for details.
2.7.16-beta.2 - 2023-12-14
Please refer to CHANGELOG.md for details.
2.7.16-...

Snyk has created this PR to upgrade: - vue from 2.7.13 to 2.7.16. See this package in npm: https://www.npmjs.com/package/vue - vue-template-compiler from 2.7.13 to 2.7.16. See this package in npm: https://www.npmjs.com/package/vue-template-compiler - @types/node from 18.11.4 to 18.19.44. See this package in npm: https://www.npmjs.com/package/@types/node - @nuxtjs/dotenv from 1.4.1 to 1.4.2. See this package in npm: https://www.npmjs.com/package/@nuxtjs/dotenv - vuetify from 2.6.12 to 2.7.2. See this package in npm: https://www.npmjs.com/package/vuetify - @vue/reactivity from 3.2.41 to 3.4.38. See this package in npm: https://www.npmjs.com/package/@vue/reactivity - core-js from 3.26.0 to 3.38.0. See this package in npm: https://www.npmjs.com/package/core-js - webpack from 4.46.0 to 4.47.0. See this package in npm: https://www.npmjs.com/package/webpack - vue-server-renderer from 2.7.13 to 2.7.16. See this package in npm: https://www.npmjs.com/package/vue-server-renderer - nuxt from 2.15.8 to 2.18.1. See this package in npm: https://www.npmjs.com/package/nuxt See this project in Snyk: https://app.snyk.io/org/debuggineffect/project/367557ba-5224-4d60-b8ec-22e795f7a922?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: vue, vue-template-compiler, , , vuetify, , core-js, webpack, vue-server-renderer, nuxt #307

[Snyk] Upgrade: vue, vue-template-compiler, , , vuetify, , core-js, webpack, vue-server-renderer, nuxt #307

BitcoinOutput commented Sep 8, 2024

🔧 Bug Fixes

New Features

New Contributors

[Snyk] Upgrade: vue, vue-template-compiler, , , vuetify, , core-js, webpack, vue-server-renderer, nuxt #307

Are you sure you want to change the base?

[Snyk] Upgrade: vue, vue-template-compiler, , , vuetify, , core-js, webpack, vue-server-renderer, nuxt #307

Conversation

BitcoinOutput commented Sep 8, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

🔧 Bug Fixes

New Features

New Contributors