[PR #176] [CLOSED] fix(deps): bump core-js from 3.18.3 to 3.19.0 #186

Closed
opened 2025-12-01 17:06:12 +01:00 by arthur · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/ArthurDanjou/website-old/pull/176
Author: @dependabot[bot]
Created: 10/26/2021
Status: Closed

Base: masterHead: dependabot/npm_and_yarn/core-js-3.19.0


📝 Commits (1)

  • e916220 fix(deps): bump core-js from 3.18.3 to 3.19.0

📊 Changes

2 files changed (+5 additions, -5 deletions)

View changed files

📝 package.json (+1 -1)
📝 yarn.lock (+4 -4)

📄 Description

Bumps core-js from 3.18.3 to 3.19.0.

Changelog

Sourced from core-js's changelog.

3.19.0 - 2021.10.25
  • Most built-ins are encapsulated in core-js for preventing possible cases of breaking / observing the internal state by patching / deleting of them
    • Avoid .call / .apply prototype methods that could be patched
    • Avoid instanceof operator - implicit .prototype / @@hasInstance access that could be patched
    • Avoid RegExp#test, String#match and some over methods - implicit .exec and RegExp well-known symbols access that could be patched
  • Clearing of Error stack from extra entries experimentally added to AggregateError, #996, in case lack of problems it will be extended to other cases
  • In engines with native Symbol support, new well-known symbols created with usage Symbol.for for ensuring the same keys in different realms, #998
  • Added a workaround of a BrowserFS NodeJS process polyfill bug that incorrectly reports V8 version that's used in some cases of core-js feature detection
  • Fixed normalization of message AggregateError argument
  • Fixed order of arguments conversion in Math.scale, a spec draft bug
  • Fixed core-js-builder work in NodeJS 17, added a workaround of webpack + NodeJS 17 issue
  • Added NodeJS 17.0 compat data mapping
  • Added Opera Android 65 compat data mapping
  • Updated Electron 16.0 compat data mapping
  • Many other minor fixes and improvements
Commits
  • 6123ff1 3.19.0
  • 7ff5ac1 update the changelog
  • 0a2f57b fix Function#name
  • 61ebde0 use hasOwn instead of in in some required cases
  • e41af69 get rid of some duplicates
  • 3ef0ded avoid instanceof where it's possible since .prototype and @@hasInstance...
  • 1a05cc3 update dependencies
  • c901ef8 stylistic fix
  • 593f257 encapsulate some more built-ins, reuse array-unique-by in `reflect.get-meta...
  • a37a799 update eslint
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/ArthurDanjou/website-old/pull/176 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/26/2021 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/npm_and_yarn/core-js-3.19.0` --- ### 📝 Commits (1) - [`e916220`](https://github.com/ArthurDanjou/website-old/commit/e91622090d9ef2f27d79b500fed6706b8ce4b80c) fix(deps): bump core-js from 3.18.3 to 3.19.0 ### 📊 Changes **2 files changed** (+5 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) 📝 `yarn.lock` (+4 -4) </details> ### 📄 Description Bumps [core-js](https://github.com/zloirock/core-js) from 3.18.3 to 3.19.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md">core-js's changelog</a>.</em></p> <blockquote> <h5>3.19.0 - 2021.10.25</h5> <ul> <li>Most built-ins are encapsulated in <code>core-js</code> for preventing possible cases of breaking / observing the internal state by patching / deleting of them <ul> <li>Avoid <code>.call</code> / <code>.apply</code> prototype methods that could be patched</li> <li>Avoid <code>instanceof</code> operator - implicit <code>.prototype</code> / <code>@@hasInstance</code> access that could be patched</li> <li>Avoid <code>RegExp#test</code>, <code>String#match</code> and some over methods - implicit <code>.exec</code> and <code>RegExp</code> well-known symbols access that could be patched</li> </ul> </li> <li>Clearing of <code>Error</code> stack from extra entries experimentally added to <code>AggregateError</code>, <a href="https://github-redirect.dependabot.com/zloirock/core-js/pull/996">#996</a>, in case lack of problems it will be extended to other cases</li> <li>In engines with native <code>Symbol</code> support, new well-known symbols created with usage <code>Symbol.for</code> for ensuring the same keys in different realms, <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/998">#998</a></li> <li>Added a workaround of <a href="https://github-redirect.dependabot.com/jvilk/bfs-process/issues/5">a BrowserFS NodeJS <code>process</code> polyfill bug</a> that incorrectly reports V8 version that's used in some cases of <code>core-js</code> feature detection</li> <li>Fixed normalization of <code>message</code> <code>AggregateError</code> argument</li> <li>Fixed order of arguments conversion in <code>Math.scale</code>, <a href="https://github-redirect.dependabot.com/rwaldron/proposal-math-extensions/issues/24">a spec draft bug</a></li> <li>Fixed <code>core-js-builder</code> work in NodeJS 17, added a workaround of <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14532"><code>webpack</code> + NodeJS 17 issue</a></li> <li>Added NodeJS 17.0 compat data mapping</li> <li>Added Opera Android 65 compat data mapping</li> <li>Updated Electron 16.0 compat data mapping</li> <li>Many other minor fixes and improvements</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zloirock/core-js/commit/6123ff17d26eddf3ba8d456feb97decab3a9e9f6"><code>6123ff1</code></a> 3.19.0</li> <li><a href="https://github.com/zloirock/core-js/commit/7ff5ac13f480a86ac3e59319dd7548ae2a439f70"><code>7ff5ac1</code></a> update the changelog</li> <li><a href="https://github.com/zloirock/core-js/commit/0a2f57b6006ad1bdce1ac96689583baff6657a51"><code>0a2f57b</code></a> fix <code>Function#name</code></li> <li><a href="https://github.com/zloirock/core-js/commit/61ebde0b9cb8c6f35f6eb7c93794dbc54ea81500"><code>61ebde0</code></a> use <code>hasOwn</code> instead of <code>in</code> in some required cases</li> <li><a href="https://github.com/zloirock/core-js/commit/e41af69359a33b909b1d714ee9b5bfa10fcbe09f"><code>e41af69</code></a> get rid of some duplicates</li> <li><a href="https://github.com/zloirock/core-js/commit/3ef0dedbf8f38203d5eac045dbfc833a02cb7509"><code>3ef0ded</code></a> avoid <code>instanceof</code> where it's possible since <code>.prototype</code> and <code>@@hasInstance</code>...</li> <li><a href="https://github.com/zloirock/core-js/commit/1a05cc3710fbe07fa8cc804abe765d176f872a20"><code>1a05cc3</code></a> update dependencies</li> <li><a href="https://github.com/zloirock/core-js/commit/c901ef8d602d180236f5d3379dc81bb1a5e8bed4"><code>c901ef8</code></a> stylistic fix</li> <li><a href="https://github.com/zloirock/core-js/commit/593f2576efd6652b62f92d5b1a1f1f0e23f943a7"><code>593f257</code></a> encapsulate some more built-ins, reuse <code>array-unique-by</code> in `reflect.get-meta...</li> <li><a href="https://github.com/zloirock/core-js/commit/a37a79989f6f22ad85b8bd38adffafc9f6e486d4"><code>a37a799</code></a> update <code>eslint</code></li> <li>Additional commits viewable in <a href="https://github.com/zloirock/core-js/compare/v3.18.3...v3.19.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=core-js&package-manager=npm_and_yarn&previous-version=3.18.3&new-version=3.19.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
arthur added the pull-request label 2025-12-01 17:06:12 +01:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: arthur/website-old#186