[PR #296] [CLOSED] fix(deps): bump core-js from 3.23.3 to 3.25.0 #312

New Issue

arthur · 2025-12-01T17:06:44+01:00

arthur commented

2025-12-01 17:06:44 +01:00

📋 Pull Request Information

Original PR: https://github.com/ArthurDanjou/website-old/pull/296
Author: @dependabot[bot]
Created: 8/25/2022
Status: ❌ Closed

Base: master ← Head: dependabot/npm_and_yarn/core-js-3.25.0

📝 Commits (1)

6ba3285 fix(deps): bump core-js from 3.23.3 to 3.25.0

📊 Changes

2 files changed (+5 additions, -5 deletions)

View changed files

📝 package.json (+1 -1)
📝 yarn.lock (+4 -4)

📄 Description

Bumps core-js from 3.23.3 to 3.25.0.

Changelog

Sourced from core-js's changelog.

3.25.0 - 2022.08.25

Added Object.prototype.__proto__ polyfill

It's optional, legacy, and in some cases (mainly because of developers' mistakes) can cause problems, but some libraries depend on it, and most code can't work without the proper libraries' ecosystem

Only for modern engines where this feature is missed (like Deno), it's not installed in IE10- since here we have no proper way setting of the prototype

Without fixes of early implementations where it's not an accessor since those fixes are impossible

Only for the global version

Considering document.all as an object in some missed cases, see ECMAScript Annex B 3.6

Avoiding unnecessary promise creation and validation result in %WrapForValid(Async)IteratorPrototype%.return, proposal-iterator-helpers/215

Fixed omitting the result of proxing .return in %IteratorHelperPrototype%.return, #1116

Fixed the order creation of properties of iteration result object of some iterators (value should be created before done)

Fixed some cases of Safari < 13 bug - silent on non-writable array .length setting

Fixed ArrayBuffer.length in V8 ~ Chrome 27-

Relaxed condition of re-usage native WeakMap for internal states with multiple core-js copies

Availability cloning of FileList in the structuredClone polyfill extended to some more old engines versions

Some stylistic changes and minor fixes

Throwing a TypeError in core-js-compat / core-js-builder in case of passing invalid module names / filters for avoiding unexpected result, related to #1115

Added missed NodeJS 13.2 to esmodules core-js-compat / core-js-builder target

Added Electron 21 compat data mapping

Added Oculus Browser 23.0 compat data mapping

3.24.1 - 2022.07.30

NodeJS is ignored in IS_BROWSER detection to avoid a false positive with jsdom, #1110

Fixed detection of @@species support in Promise in some old engines

{ Array, %TypedArray% }.prototype.{ findLast, findLastIndex } marked as shipped in FF104

Added iOS Safari 15.6 compat data mapping

Fixed Opera 15 compat data mapping

3.24.0 - 2022.07.25

Recent updates of the iterator helpers proposal, #1101:

.asIndexedPairs renamed to .indexed, proposal-iterator-helpers/183:

Iterator.prototype.asIndexedPairs -> Iterator.prototype.indexed

AsyncIterator.prototype.asIndexedPairs -> AsyncIterator.prototype.indexed

Avoid exposing spec fiction %AsyncFromSyncIteratorPrototype% in AsyncIterator.from and Iterator.prototype.toAsync, proposal-iterator-helpers/182, proposal-iterator-helpers/202

Avoid unnecessary promise creation in %WrapForValidAsyncIteratorPrototype%.next, proposal-iterator-helpers/197

Do not validate value in %WrapForValid(Async)IteratorPrototype%.next, proposal-iterator-helpers/197 and proposal-iterator-helpers/205

Do not forward the parameter of .next / .return to an underlying iterator by the extended iterator protocol, a part of proposal-iterator-helpers/194

.throw methods removed from all wrappers / helpers prototypes, a part of proposal-iterator-helpers/194

Close inner iterators of { Iterator, AsyncIterator }.prototype.flatMap proxy iterators on .return, proposal-iterator-helpers/195

Throw RangeError on NaN in { Iterator, AsyncIterator }.prototype.{ drop, take }, proposal-iterator-helpers/181

Many other updates and fixes of this proposal

%TypedArray%.prototype.toSpliced method removed from the change array by copy proposal and marked as obsolete in core-js, proposal-change-array-by-copy/88

Polyfill Promise with unhandledrejection event support (browser style) in Deno < 1.24

Available new targets in core-js-compat / core-js-builder and added compat data for them:

Bun (bun), compat data for 0.1.1-0.1.5, #1103

Hermes (hermes), compat data for 0.1-0.11, #1099

Oculus Browser (oculus), compat data mapping for 3.0-22.0, #1098

Added Samsung Internet 18.0 compat data mapping

3.23.5 - 2022.07.18

Fixed a typo in the structuredClone feature detection, #1106

... (truncated)

Commits

b61f3c3 3.25.0
7750751 improve notes
ea7645f add Object.prototype.__proto__ polyfill
9e70176 fix omitting the result of proxing .return in `%IteratorHelperPrototype%.re...
4910371 update dependencies
4c9c6d6 add missed NodeJS 13.2 to esmodules core-js-compat / core-js-builder ta...
9f4af1f fix a typo
0400dea some stylistic changes and minor fixes
c76303d update dependencies
95fc85d fix ArrayBuffer.length in V8 ~ Chrome 27-
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/ArthurDanjou/website-old/pull/296 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 8/25/2022 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/npm_and_yarn/core-js-3.25.0` --- ### 📝 Commits (1) - [`6ba3285`](https://github.com/ArthurDanjou/website-old/commit/6ba3285adb92fcd217f3d187324e5dea2fd7095c) fix(deps): bump core-js from 3.23.3 to 3.25.0 ### 📊 Changes **2 files changed** (+5 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) 📝 `yarn.lock` (+4 -4) </details> ### 📄 Description Bumps [core-js](https://github.com/zloirock/core-js) from 3.23.3 to 3.25.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md">core-js's changelog</a>.</em></p> <blockquote> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.25.0">3.25.0 - 2022.08.25</a></h5> <ul> <li>Added <a href="https://tc39.es/ecma262/#sec-object.prototype.__proto__"><code>Object.prototype.__proto__</code></a> polyfill <ul> <li>It's optional, legacy, and in some cases (mainly because of developers' mistakes) can cause problems, but <a href="https://github-redirect.dependabot.com/denoland/deno/issues/13321">some libraries depend on it</a>, and most code can't work without the proper libraries' ecosystem</li> <li>Only for modern engines where this feature is missed (like Deno), it's not installed in IE10- since here we have no proper way setting of the prototype</li> <li>Without fixes of early implementations where it's not an accessor since those fixes are impossible</li> <li>Only for the global version</li> </ul> </li> <li>Considering <code>document.all</code> as an object in some missed cases, see <a href="https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot">ECMAScript Annex B 3.6</a></li> <li>Avoiding unnecessary promise creation and validation result in <code>%WrapForValid(Async)IteratorPrototype%.return</code>, <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/215">proposal-iterator-helpers/215</a></li> <li>Fixed omitting the result of proxing <code>.return</code> in <code>%IteratorHelperPrototype%.return</code>, <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/1116">#1116</a></li> <li>Fixed the order creation of properties of iteration result object of some iterators (<code>value</code> should be created before <code>done</code>)</li> <li>Fixed some cases of Safari < 13 bug - silent on non-writable array <code>.length</code> setting</li> <li>Fixed <code>ArrayBuffer.length</code> in V8 ~ Chrome 27-</li> <li>Relaxed condition of re-usage native <code>WeakMap</code> for internal states with multiple <code>core-js</code> copies</li> <li>Availability cloning of <code>FileList</code> in the <code>structuredClone</code> polyfill extended to some more old engines versions</li> <li>Some stylistic changes and minor fixes</li> <li>Throwing a <code>TypeError</code> in <code>core-js-compat</code> / <code>core-js-builder</code> in case of passing invalid module names / filters for avoiding unexpected result, related to <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/1115">#1115</a></li> <li>Added missed NodeJS 13.2 to <code>esmodules</code> <code>core-js-compat</code> / <code>core-js-builder</code> target</li> <li>Added Electron 21 compat data mapping</li> <li>Added Oculus Browser 23.0 compat data mapping</li> </ul> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.24.1">3.24.1 - 2022.07.30</a></h5> <ul> <li>NodeJS is ignored in <code>IS_BROWSER</code> detection to avoid a false positive with <code>jsdom</code>, <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/1110">#1110</a></li> <li>Fixed detection of <code>@@species</code> support in <code>Promise</code> in some old engines</li> <li><code>{ Array, %TypedArray% }.prototype.{ findLast, findLastIndex }</code> marked as shipped <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1775026">in FF104</a></li> <li>Added iOS Safari 15.6 compat data mapping</li> <li>Fixed Opera 15 compat data mapping</li> </ul> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.24.0">3.24.0 - 2022.07.25</a></h5> <ul> <li>Recent updates of the <a href="https://github.com/tc39/proposal-iterator-helpers">iterator helpers proposal</a>, <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/1101">#1101</a>: <ul> <li><code>.asIndexedPairs</code> renamed to <code>.indexed</code>, <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/183">proposal-iterator-helpers/183</a>: <ul> <li><code>Iterator.prototype.asIndexedPairs</code> -> <code>Iterator.prototype.indexed</code></li> <li><code>AsyncIterator.prototype.asIndexedPairs</code> -> <code>AsyncIterator.prototype.indexed</code></li> </ul> </li> <li>Avoid exposing spec fiction <code>%AsyncFromSyncIteratorPrototype%</code> in <code>AsyncIterator.from</code> and <code>Iterator.prototype.toAsync</code>, <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/182">proposal-iterator-helpers/182</a>, <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/202">proposal-iterator-helpers/202</a></li> <li>Avoid unnecessary promise creation in <code>%WrapForValidAsyncIteratorPrototype%.next</code>, <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/197">proposal-iterator-helpers/197</a></li> <li>Do not validate value in <code>%WrapForValid(Async)IteratorPrototype%.next</code>, <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/197">proposal-iterator-helpers/197</a> and <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/205">proposal-iterator-helpers/205</a></li> <li>Do not forward the parameter of <code>.next</code> / <code>.return</code> to an underlying iterator by the extended iterator protocol, a part of <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/194">proposal-iterator-helpers/194</a></li> <li><code>.throw</code> methods removed from all wrappers / helpers prototypes, a part of <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/194">proposal-iterator-helpers/194</a></li> <li>Close inner iterators of <code>{ Iterator, AsyncIterator }.prototype.flatMap</code> proxy iterators on <code>.return</code>, <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/195">proposal-iterator-helpers/195</a></li> <li>Throw <code>RangeError</code> on <code>NaN</code> in <code>{ Iterator, AsyncIterator }.prototype.{ drop, take }</code>, <a href="https://github-redirect.dependabot.com/tc39/proposal-iterator-helpers/pull/181">proposal-iterator-helpers/181</a></li> <li>Many other updates and fixes of this proposal</li> </ul> </li> <li><code>%TypedArray%.prototype.toSpliced</code> method removed from the <a href="https://github.com/tc39/proposal-change-array-by-copy">change array by copy proposal</a> and marked as obsolete in <code>core-js</code>, <a href="https://github-redirect.dependabot.com/tc39/proposal-change-array-by-copy/issues/88">proposal-change-array-by-copy/88</a></li> <li>Polyfill <code>Promise</code> with <code>unhandledrejection</code> event support (browser style) in Deno < <a href="https://github.com/denoland/deno/releases/tag/v1.24.0">1.24</a></li> <li>Available new targets in <code>core-js-compat</code> / <code>core-js-builder</code> and added compat data for them: <ul> <li>Bun (<code>bun</code>), compat data for 0.1.1-0.1.5, <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/1103">#1103</a></li> <li>Hermes (<code>hermes</code>), compat data for 0.1-0.11, <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/1099">#1099</a></li> <li>Oculus Browser (<code>oculus</code>), compat data mapping for 3.0-22.0, <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/1098">#1098</a></li> </ul> </li> <li>Added Samsung Internet 18.0 compat data mapping</li> </ul> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.23.5">3.23.5 - 2022.07.18</a></h5> <ul> <li>Fixed a typo in the <code>structuredClone</code> feature detection, <a href="https://github-redirect.dependabot.com/zloirock/core-js/issues/1106">#1106</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zloirock/core-js/commit/b61f3c334f7a3010f376eae4fc465e68232da102"><code>b61f3c3</code></a> 3.25.0</li> <li><a href="https://github.com/zloirock/core-js/commit/775075175b36b48ba40f500e8903240978e2f0ae"><code>7750751</code></a> improve notes</li> <li><a href="https://github.com/zloirock/core-js/commit/ea7645f83b1df744c687bce222138ff68a42d0dc"><code>ea7645f</code></a> add <code>Object.prototype.__proto__</code> polyfill</li> <li><a href="https://github.com/zloirock/core-js/commit/9e701767927c0c590f0bfbfa1cbc7e09c451584b"><code>9e70176</code></a> fix omitting the result of proxing <code>.return</code> in `%IteratorHelperPrototype%.re...</li> <li><a href="https://github.com/zloirock/core-js/commit/4910371426d46fc48c8e00820d7ea1c014ed9b5a"><code>4910371</code></a> update dependencies</li> <li><a href="https://github.com/zloirock/core-js/commit/4c9c6d6187b906c14f41b84d3ac992c6d3e2aeb8"><code>4c9c6d6</code></a> add missed NodeJS 13.2 to <code>esmodules</code> <code>core-js-compat</code> / <code>core-js-builder</code> ta...</li> <li><a href="https://github.com/zloirock/core-js/commit/9f4af1fbc1bc78caa99794c0c8a390f1d8d6f199"><code>9f4af1f</code></a> fix a typo</li> <li><a href="https://github.com/zloirock/core-js/commit/0400deaa99b304f5a772f5c7cc7c622e10aa47f6"><code>0400dea</code></a> some stylistic changes and minor fixes</li> <li><a href="https://github.com/zloirock/core-js/commit/c76303daf746363bb59ee74e77eeb801b763c3d9"><code>c76303d</code></a> update dependencies</li> <li><a href="https://github.com/zloirock/core-js/commit/95fc85d9f40e4c5cd2fd23b71b7cbbba108c7ae0"><code>95fc85d</code></a> fix <code>ArrayBuffer.length</code> in V8 ~ Chrome 27-</li> <li>Additional commits viewable in <a href="https://github.com/zloirock/core-js/compare/v3.23.3...v3.25.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=core-js&package-manager=npm_and_yarn&previous-version=3.23.3&new-version=3.25.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

arthur added the pull-request label 2025-12-01 17:06:44 +01:00

arthur closed this issue

2025-12-01 17:06:44 +01:00

arthur referenced this issue

2025-12-01 17:06:46 +01:00

[PR #312] [CLOSED] fix(deps): bump core-js from 3.23.3 to 3.25.3 #326

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: arthur/website-old#312