[Snyk] Upgrade core-js from 2.6.12 to 3.20.2 #5

snyk-bot · 2022-01-29T02:39:04Z

Snyk has created this PR to upgrade core-js from 2.6.12 to 3.20.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 98 versions ahead of your current version.
The recommended version was released a month ago, on 2022-01-01.

Release notes

Package name: core-js

3.20.2 - 2022-01-01
- Added a fix of a V8 ~ Chrome 36- Object.{ defineProperty, defineProperties } bug, Babel issue
- Added fixes of some different %TypedArray%.prototype.set bugs, affects modern engines (like Chrome < 95 or Safari < 14.1)
3.20.1 - 2021-12-23
- Fixed the order of calling reactions of already fulfilled / rejected promises in Promise.prototype.then, #1026
- Fixed possible memory leak in specific promise chains
- Fixed some missed dependencies of entries
- Added Deno 1.18 compat data mapping
3.20.0 - 2021-12-15
- Added structuredClone method from the HTML spec, see MDN
  - Includes all cases of cloning and transferring of required ECMAScript and platform types that can be polyfilled, for the details see the caveats
  - Uses native structured cloning algorithm implementations where it's possible
  - Includes the new semantic of errors cloning from html/5749
- Added DOMException polyfill, the Web IDL spec, see MDN
  - Includes DOMException and its attributes polyfills with fixes of many different engines bugs
  - Includes DOMException#stack property polyfill in engines that should have it
  - Reuses native DOMException implementations where it's possible (for example, in old NodeJS where it's not exposed as global)
- Added support of cause on all Error types
- Added Error.prototype.toString method polyfill with fixes of many different bugs of JS engines
- Added Number.prototype.toExponential method polyfill with fixes of many different bugs of JS engines
- Array grouping proposal:
  - Moved to stage 3
  - Added Array.prototype.groupByToMap method
  - Removed @@ species support
- Added change Array by copy stage 2 proposal:
  - Array.prototype.toReversed
  - Array.prototype.toSorted
  - Array.prototype.toSpliced
  - Array.prototype.with
  - %TypedArray%.prototype.toReversed
  - %TypedArray%.prototype.toSorted
  - %TypedArray%.prototype.toSpliced
  - %TypedArray%.prototype.with
- Added Iterator.prototype.toAsync method from the iterator helpers stage 2 proposal
- Array.fromAsync proposal moved to stage 2
- Added String.cooked stage 1 proposal:
- Added Function.prototype.unThis stage 0 proposal
- Added Function.{ isCallable, isConstructor } stage 0 proposal:
  - Function.isCallable
  - Function.isConstructor
- Added a workaround of most cases breakage modern String#at after loading obsolete String#at proposal module, #1019
- Fixed Array.prototype.{ values, @@ iterator }.name in V8 ~ Chrome 45-
- Fixed validation of typed arrays in typed arrays iteration methods in V8 ~ Chrome 50-
- Extension of the API, #1012
  - Added a new core-js/actual/** namespace
  - Added entry points for each finished post-ES6 proposal
3.19.3 - 2021-12-06
- Fixed internal slots check in methods of some built-in types, #1017
- Fixed URLSearchParams iterator .next that should be enumerable by the spec
- Refactored Subscription
- Added NodeJS 17.2 compat data mapping
3.19.2 - 2021-11-29
- Added a workaround for a UC Browser specific version bug with unobservable RegExp#sticky flag, #1008, #1015
- Added handling of comments and specific spaces to Function#name polyfill, #1010, thanks @ ildar-shaimordanov
- Prevented some theoretical cases of breaking / observing the internal state by patching Array.prototype[@@ species]
- Refactored URL and URLSearchParams
- Added iOS Safari 15.2 compat data mapping
- Added Electron 17.0 compat data mapping
- Updated Deno compat data mapping
3.19.1 - 2021-11-02
- Added a workaround for FF26- bug where ArrayBuffers are non-extensible, but Object.isExtensible does not report it:
  - Fixed in Object.{ isExtensible, isSealed, isFrozen } and Reflect.isExtensible
  - Fixed handling of ArrayBuffers as collections keys
- Fixed Object#toString on AggregateError in IE10-
- Fixed possible lack of dependencies of WeakMap in IE8-
- .findLast methods family marked as supported from Chrome 97
- Fixed inheritance of Electron compat data web. modules
- Fixed Safari 15.1 compat data (some features were not added)
- Added iOS Safari 15.1 compat data mapping
3.19.0 - 2021-10-25
- Most built-ins are encapsulated in core-js for preventing possible cases of breaking / observing the internal state by patching / deleting of them
  - Avoid .call / .apply prototype methods that could be patched
  - Avoid instanceof operator - implicit .prototype / @@ hasInstance access that could be patched
  - Avoid RegExp#test, String#match and some over methods - implicit .exec and RegExp well-known symbols access that could be patched
- Clearing of Error stack from extra entries experimentally added to AggregateError, #996, in case lack of problems it will be extended to other cases
- In engines with native Symbol support, new well-known symbols created with usage Symbol.for for ensuring the same keys in different realms, #998
- Added a workaround of a BrowserFS NodeJS process polyfill bug that incorrectly reports V8 version that's used in some cases of core-js feature detection
- Fixed normalization of message AggregateError argument
- Fixed order of arguments conversion in Math.scale, a spec draft bug
- Fixed core-js-builder work in NodeJS 17, added a workaround of webpack + NodeJS 17 issue
- Added NodeJS 17.0 compat data mapping
- Added Opera Android 65 compat data mapping
- Updated Electron 16.0 compat data mapping
- Many other minor fixes and improvements
3.18.3 - 2021-10-12
- Fixed the prototype chain of AggregateError constructor that should contain Error constructor
- Fixed incorrect AggregateError.prototype properties descriptors
- Fixed InstallErrorCause internal operation
- Added NodeJS 16.11 compat data mapping
- Added Deno 1.16 compat data mapping
- Object.hasOwn marked as supported from Safari 15.1
3.18.2 - 2021-10-05
- Early { Array, %TypedArray% }.fromAsync errors moved to the promise, per the latest changes of the spec draft
- Internal ToInteger(OrInfinity) operation returns +0 for -0 argument, ES2020+ update
- Fixed theoretical problems with handling bigint in Number constructor wrapper
- Fixed String.raw with extra arguments
- Fixed some missed dependencies in entry points
- Some other minor fixes and improvements
- Refactoring
3.18.1 - 2021-09-26
- Fixed String.prototype.substr feature detection and compat data
- Removed mistakenly added .forEach from prototypes of some DOM collections where it shouldn't be, #988, #987, thanks @ moorejs
- Added cause to AggregateError constructor implementation (still without adding to the feature detection)
- Families of .at and .findLast methods marked as supported in Safari TP
- Added Electron 16.0 compat data mapping
3.18.0 - 2021-09-19
3.17.3 - 2021-09-09
3.17.2 - 2021-09-02
3.17.1 - 2021-09-01
3.17.0 - 2021-09-01
3.16.4 - 2021-08-29
3.16.3 - 2021-08-24
3.16.2 - 2021-08-17
3.16.1 - 2021-08-08
3.16.0 - 2021-07-30
3.15.2 - 2021-06-29
3.15.1 - 2021-06-22
3.15.0 - 2021-06-20
3.14.0 - 2021-06-05
3.13.1 - 2021-05-29
3.13.0 - 2021-05-25
3.12.1 - 2021-05-08
3.12.0 - 2021-05-06
3.11.3 - 2021-05-05
3.11.2 - 2021-05-03
3.11.1 - 2021-04-28
3.11.0 - 2021-04-22
3.10.2 - 2021-04-19
3.10.1 - 2021-04-07
3.10.0 - 2021-03-31
3.9.1 - 2021-02-28
3.9.0 - 2021-02-18
3.8.3 - 2021-01-19
3.8.2 - 2021-01-03
3.8.1 - 2020-12-06
3.8.0 - 2020-11-25
3.7.0 - 2020-11-06
3.6.5 - 2020-04-09
3.6.4 - 2020-01-13
3.6.3 - 2020-01-10
3.6.2 - 2020-01-06
3.6.1 - 2019-12-25
3.6.0 - 2019-12-18
3.5.0 - 2019-12-12
3.4.8 - 2019-12-08
3.4.7 - 2019-12-02
3.4.6 - 2019-12-02
3.4.5 - 2019-11-27
3.4.4 - 2019-11-27
3.4.3 - 2019-11-26
3.4.2 - 2019-11-21
3.4.1 - 2019-11-12
3.4.0 - 2019-11-06
3.3.6 - 2019-10-31
3.3.5 - 2019-10-28
3.3.4 - 2019-10-25
3.3.3 - 2019-10-21
3.3.2 - 2019-10-14
3.3.1 - 2019-10-13
3.3.0 - 2019-10-13
3.2.1 - 2019-08-12
3.2.0 - 2019-08-08
3.1.4 - 2019-06-15
3.1.3 - 2019-05-27
3.1.2 - 2019-05-21
3.1.1 - 2019-05-20
3.1.0 - 2019-05-19
3.0.1 - 2019-04-06
3.0.0 - 2019-03-19
3.0.0-beta.20 - 2019-03-17
3.0.0-beta.19 - 2019-03-14
3.0.0-beta.18 - 2019-03-09
3.0.0-beta.17 - 2019-03-09
3.0.0-beta.16 - 2019-02-18
3.0.0-beta.15 - 2019-02-09
3.0.0-beta.14 - 2019-02-07
3.0.0-beta.13 - 2019-02-04
3.0.0-beta.12 - 2019-02-02
3.0.0-beta.11 - 2019-01-27
3.0.0-beta.10 - 2019-01-22
3.0.0-beta.9 - 2019-01-17
3.0.0-beta.8 - 2019-01-10
3.0.0-beta.7 - 2018-12-27
3.0.0-beta.6 - 2018-12-18
3.0.0-beta.5 - 2018-12-11
3.0.0-beta.4 - 2018-12-04
3.0.0-beta.3 - 2018-06-07
3.0.0-beta.2 - 2018-05-26
3.0.0-beta.1 - 2018-05-19
3.0.0-alpha.4 - 2018-04-09
3.0.0-alpha.3 - 2018-03-30
3.0.0-alpha.2 - 2018-03-27
3.0.0-alpha.1 - 2018-03-26
2.6.12 - 2020-11-25

from core-js GitHub release notes

Commit messages

Package name: core-js

da1bf15 3.20.2
fa69b3a clarification
2c3a962 update the year
1ff3a8c update `eslint-plugin-unicorn`
53846c1 update dependencies
a4219cb Merge pull request #1030 from zhangenming/patch-2
ec42d6a typo: correction path.
da01c11 fix a typo
e6c1a4e rename method
b64a3a9 refactor: simplify expression. (#1029)
7b9e113 add fixes of some different `%TypedArray%,prototype.set` bugs
b40784e restart `puppeteer` each 16 pages
39c825a explicit prohibition of ES3 reserved words is no longer required with ESLint 8
901d97b add a fix of a V8 ~ Chrome 36- `Object.defineProperty` bug
6ce4404 some syntax fixes
818e473 clarify supported versions
8f22e98 3.20.1
5d78d50 fix possible memory leaking in specific promise chains
9ffb395 add a clarification
e287627 fix the order of calling reactions of fulfilled / rejected promises in `Promise.prototype.then`, close #1026
09db127 add `promises-es6-tests` case
24c6889 update dependencies
d893abd leaving `DOMException` without `Object#toString` dependency should be safe
065e3d0 fix some more dependencies of entries