[Snyk] Upgrade: chart.js, core-js

[bsimmons123]

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

chart.js
from 4.4.3 to 4.4.4 | 1 version ahead of your current version | 22 days ago
on 2024-08-20
core-js
from 3.38.0 to 3.38.1 | 1 version ahead of your current version | 22 days ago
on 2024-08-20

Release notes

Package name: chart.js

• 4.4.4 - 2024-08-20
  

  Essential Links

  • npm
  • Migration guide
  • Docs
  • API
  • Samples

  Bugs Fixed

  • #11873 Check if range method exists on element before executing it
  • #11863 Return false from the average tooltip positioner on no valid data
  • #11858 Bugfix/issue 11804 tooltip show for all invisible
  • #11851 fix: Unset _resizeBeforeDraw before _resize() call to avoid possible recursion
  • #11844 fix issue #11717
  • #11788 Fix drawing angle lines on reversed radial scale

  Types

  • #11867 fix(types): exclude DeepPartial<unknown[]> from ChartOptions interface
  • #11862 fix(types): add xCenter and yCenter properties to RadialLinearScale interface
  • #11817 Remove box padding from legend types
  • #11796 Add fit method to LegendElement interface
  • #11780 types: Allow passing undefined for chart options

  Documentation

  • #11871 Add radial linear scale to docs section of samples
  • #11823 Update OffscreenCanvas documentation, as it is widely available now
  • #11781 Fix some typos

  Development

  • #11874 Bump package version to 4.4.4

  Thanks to @ CatchABus, @ LeeLenaleee, @ MichelHMachado, @ artus9033, @ huqingkun, @ jdufresne and @ joliss

• 4.4.3 - 2024-05-17
  

  Essential Links

  • npm
  • Migration guide
  • Docs
  • API
  • Samples
  • #11754 Fix error when object prototype is frozen

  Bugs Fixed

  • #11764 do not attempt to clear canvas if one does not exist
  • #11755 #11450 hide bar by dataindex
  • #11690 Create parsed object with correct keys
  • #11707 platform.isAttached should return false if canvas is false-y

  Documentation

  • #11762 Update license year

  Development

  • #11776 Bump to 4.4.3
  • #11773 Bump pnpm/action-setup from 3.0.0 to 4.0.0
  • #11720 Bump follow-redirects from 1.15.4 to 1.15.6

  Thanks to @ DAcodedBEAT, @ EricWittrock, @ LeeLenaleee, @ LiamSwayne, @ dependabot and @ dependabot[bot]

from chart.js GitHub release notes

Package name: core-js

• 3.38.1 - 2024-08-20
  
  • Changes v3.38.0...v3.38.1
  • Fixed some cases of URLSearchParams percent decoding, #1357, #1361, thanks @ slowcheetah
  • Some stylistic changes and minor optimizations
  • Compat data improvements:
    • Iterator helpers proposal methods marked as shipped from FF131
    • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from Bun 1.1.23
    • RegExp.escape marked as shipped from Bun 1.1.22
    • Promise.try marked as shipped from Bun 1.1.22
    • Uint8Array to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22
    • Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes
    • Added Opera Android 84 compat data mapping
• 3.38.0 - 2024-08-04
  
  • Changes v3.37.1...v3.38.0
  • RegExp.escape proposal:
    • Built-ins:
      • RegExp.escape
    • Moved to stage 3, June 2024 and July 2024 TC39 meetings
    • Updated the way of escaping, regex-escaping/77
    • Throw an error on non-strings, regex-escaping/58
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Promise.try proposal:
    • Built-ins:
      • Promise.try
    • Moved to stage 3, June 2024 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Uint8Array to / from base64 and hex stage 3 proposal:
    • Built-ins:
      • Uint8Array.fromBase64
      • Uint8Array.fromHex
      • Uint8Array.prototype.setFromBase64
      • Uint8Array.prototype.setFromHex
      • Uint8Array.prototype.toBase64
      • Uint8Array.prototype.toHex
    • Added Uint8Array.prototype.{ setFromBase64, setFromHex } methods
    • Added Uint8Array.fromBase64 and Uint8Array.prototype.setFromBase64 lastChunkHandling option, proposal-arraybuffer-base64/33
    • Added Uint8Array.prototype.toBase64 omitPadding option, proposal-arraybuffer-base64/60
    • Added throwing a TypeError on arrays backed by detached buffers
    • Unconditional forced replacement changed to feature detection
  • Fixed RegExp named capture groups polyfill in combination with non-capturing groups, #1352, thanks @ Ulop
  • Improved some cases of environment detection
  • Uses process.getBuiltinModule for getting built-in NodeJS modules where it's available
  • Uses https instead of http in URL constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345
  • Some minor optimizations
  • Updated browserslist in core-js-compat dependencies that fixes an upstream issue with incorrect interpretation of some browserslist queries, #1344, browserslist/829, browserslist/836
  • Compat data improvements:
    • Added Safari 18.0 compat data:
      • Fixed Object.groupBy and Map.groupBy to work for non-objects
      • Fixed throwing a RangeError if Set methods are called on an object with negative size property
      • Fixed Set.prototype.symmetricDifference to call this.has in each iteration
      • Fixed Array.fromAsync to not call the Array constructor twice
      • Added URL.parse
    • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from FF129
    • Symbol.asyncDispose added and marked as supported from V8 ~ Chromium 127
    • Promise.try added and marked as supported from V8 ~ Chromium 128
    • Added Deno 1.44 and 1.45 compat data mapping
    • self descriptor is broken in Deno 1.45.3 (again)
    • Added Electron 32 and 33 compat data mapping
    • Added Opera Android 83 compat data mapping
    • Added Samsung Internet 27 compat data mapping
    • Added Oculus Quest Browser 34 compat data mapping

from core-js GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs