-
Notifications
You must be signed in to change notification settings - Fork 0
[Snyk] Upgrade core-js from 3.12.0 to 3.41.0 #375
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Snyk has created this PR to upgrade core-js from 3.12.0 to 3.41.0. See this package in npm: core-js See this project in Snyk: https://app.snyk.io/org/mohammadnewton/project/62ca605f-5f4e-444b-a866-1857eb3a59a6?utm_source=github&utm_medium=referral&page=upgrade-pr
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hello @nejidevelops, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!
Summary of Changes
This pull request upgrades the core-js
dependency from version 3.12.0 to 3.41.0. This is an automated upgrade PR created by Snyk to keep dependencies up-to-date and address potential vulnerabilities. The upgrade includes numerous new features, bug fixes, and performance improvements as detailed in the release notes for each version between 3.12.0 and 3.41.0.
Highlights
- Dependency Upgrade: The primary change is upgrading the
core-js
dependency from version 3.12.0 to 3.41.0. - Automated PR: This pull request was automatically created by Snyk to keep dependencies up-to-date.
- Security: Keeping dependencies up-to-date helps to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities.
Changelog
- angular-app/package.json
- Upgraded
core-js
from version 3.12.0 to 3.41.0. The old version is on line 28, and the new version is on line 28.
- Upgraded
Using Gemini Code Assist
The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.
Invoking Gemini
You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command>
or @gemini-code-assist <command>
. Below is a summary of the supported commands.
Feature | Command | Description |
---|---|---|
Code Review | /gemini review |
Performs a code review for the current pull request in its current state. |
Pull Request Summary | /gemini summary |
Provides a summary of the current pull request in its current state. |
Comment | @gemini-code-assist | Responds in comments when explicitly tagged, both in issue comments and review comments. |
Help | /gemini help |
Displays a list of available commands. |
Customization
To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/
folder in the base of the repository. Detailed instructions can be found here.
Limitations & Feedback
Gemini Code Assist is currently in preview and may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments to provide feedback.
You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.
A library's heart,
Core-js, a modern start,
Upgraded with care,
Features to share,
A safer, better art.
Footnotes
-
Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Code Review
The pull request upgrades the core-js
dependency from version 3.12.0 to 3.41.0. This is an automated update by Snyk. The diff is straightforward, involving a single line change in package.json
.
Merge Readiness
The pull request updates a dependency. Given the absence of a specified style guide and the limited scope of the change, the pull request appears to be ready for merging. However, as I am unable to directly approve the pull request, it is recommended that other reviewers examine the release notes provided in the pull request description to ensure compatibility and absence of breaking changes for the project before merging. It is also recommended that the tests are run to ensure that the upgrade did not break anything. I am unable to approve the pull request in any circumstance, and that users should have others review and approve this code before merging.
Snyk has created this PR to upgrade core-js from 3.12.0 to 3.41.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 85 versions ahead of your current version.
The recommended version was released 2 months ago.
Release notes
Package name: core-js
RegExp.escape
proposal:RegExp.escape
es.
namespace module,/es/
and/stable/
namespaces entriesFloat16
proposal:Math.f16round
DataView.prototype.getFloat16
DataView.prototype.setFloat16
es.
namespace modules,/es/
and/stable/
namespaces entriesMath.clamp
stage 1 proposal:Math.clamp
Math
extensions proposal, February 2025 TC39 meetingAsyncDisposableStack
bug, tc39/proposal-explicit-resource-management/256DisposableStack
,SuppressedError
andIterator.prototype[@@ dispose]
marked as shipped from V8 ~ Chromium 134Error.isError
added and marked as shipped from V8 ~ Chromium 134Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
marked as shipped from V8 ~ Chromium 135Iterator
helpers proposal features marked as shipped from Safari 18.4JSON.parse
source text access proposal features marked as shipped from Safari 18.4Math.sumPrecise
marked as shipped from FF137Error.isError
stage 3 proposal:Error.isError
.sham
Iterator
sequencing stage 2.7 proposal:IteratorResult
objects when possible, tc39/proposal-iterator-sequencing/17, tc39/proposal-iterator-sequencing/18, December 2024 TC39 meetingSet
methodsDataView.prototype.{ getFloat16, setFloat16 }
performance, #1379, thanks @ LeviPesin%TypedArray%.prototype.toSpliced
Math.scale
) available on globalRegExp.escape
marked as shipped from Safari 18.2Promise.try
marked as shipped from Safari 18.2Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
marked as shipped from Safari 18.2Uint8Array
to / from base64 and hex proposal methods marked as shipped from Safari 18.2JSON.parse
source text access proposal features marked as shipped from FF135RegExp.escape
marked as shipped from FF134Promise.try
marked as shipped from FF134Symbol.dispose
,Symbol.asyncDispose
andIterator.prototype[@@ dispose]
marked as shipped from FF135JSON.parse
source text access proposal features marked as shipped from Bun 1.1.43URL.parse
was added - 22.1 instead of 22.0Iterator
helpers proposal:Iterator
Iterator.from
Iterator.prototype.drop
Iterator.prototype.every
Iterator.prototype.filter
Iterator.prototype.find
Iterator.prototype.flatMap
Iterator.prototype.forEach
Iterator.prototype.map
Iterator.prototype.reduce
Iterator.prototype.some
Iterator.prototype.take
Iterator.prototype.toArray
Iterator.prototype[@@ toStringTag]
es.
namespace modules,/es/
and/stable/
namespaces entriesPromise.try
:Promise.try
es.
namespace module,/es/
and/stable/
namespaces entries/actual|full/promise/try
entries for the callback arguments supportMath.sumPrecise
proposal:Math.sumPrecise
/actual/
namespace entries, unconditional forced replacement changed to feature detectionIterator
sequencing stage 2.7 proposal:Iterator.concat
Map
upsert stage 2 proposal:Map.prototype.getOrInsert
Map.prototype.getOrInsertComputed
WeakMap.prototype.getOrInsert
WeakMap.prototype.getOrInsertComputed
@@ species
pattern removed from%TypedArray%
andArrayBuffer
methods, tc39/ecma262/3450:%TypedArray%.prototype.filter
%TypedArray%.prototype.filterReject
%TypedArray%.prototype.map
%TypedArray%.prototype.slice
%TypedArray%.prototype.subarray
ArrayBuffer.prototype.slice
Uint8Array
to / from base64 and hex proposal methods marked as shipped from FF133self
descriptor is fixed in Deno 1.46.0Iterator
helpers proposal methods marked as shipped from Bun 1.1.31URLSearchParams
percent decoding, #1357, #1361, thanks @ slowcheetahIterator
helpers proposal methods marked as shipped from FF131Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
marked as shipped from Bun 1.1.23RegExp.escape
marked as shipped from Bun 1.1.22Promise.try
marked as shipped from Bun 1.1.22Uint8Array
to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22RegExp.escape
proposal:RegExp.escape
/actual/
namespace entries, unconditional forced replacement changed to feature detectionPromise.try
proposal:Promise.try
/actual/
namespace entries, unconditional forced replacement changed to feature detectionUint8Array
to / from base64 and hex stage 3 proposal:Uint8Array.fromBase64
Uint8Array.fromHex
Uint8Array.prototype.setFromBase64
Uint8Array.prototype.setFromHex
Uint8Array.prototype.toBase64
Uint8Array.prototype.toHex
Uint8Array.prototype.{ setFromBase64, setFromHex }
methodsUint8Array.fromBase64
andUint8Array.prototype.setFromBase64
lastChunkHandling
option, proposal-arraybuffer-base64/33Uint8Array.prototype.toBase64
omitPadding
option, proposal-arraybuffer-base64/60TypeError
on arrays backed by detached buffersRegExp
named capture groups polyfill in combination with non-capturing groups, #1352, thanks @ Ulopprocess.getBuiltinModule
for getting built-in NodeJS modules where it's availablehttps
instead ofhttp
inURL
constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345browserslist
incore-js-compat
dependencies that fixes an upstream issue with incorrect interpretation of somebrowserslist
queries, #1344, browserslist/829, browserslist/836Object.groupBy
andMap.groupBy
to work for non-objectsRangeError
ifSet
methods are called on an object with negative size propertySet.prototype.symmetricDifference
to callthis.has
in each iterationArray.fromAsync
to not call theArray
constructor twiceURL.parse
Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
marked as shipped from FF129Symbol.asyncDispose
added and marked as supported from V8 ~ Chromium 127Promise.try
added and marked as supported from V8 ~ Chromium 128self
descriptor is broken in Deno 1.45.3 (again)URL.parse
feature detection for some specific casesSet
methods proposal added and marked as supported from FF 127Symbol.dispose
added and marked as supported from V8 ~ Chromium 125Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
added and marked as supported from Deno 1.43URL.parse
added and marked as supported from Chromium 126URL.parse
added and marked as supported from NodeJS 22.0URL.parse
added and marked as supported from Deno 1.43Set
methods proposal:Set.prototype.intersection
Set.prototype.union
Set.prototype.difference
Set.prototype.symmetricDifference
Set.prototype.isSubsetOf
Set.prototype.isSupersetOf
Set.prototype.isDisjointFrom
es.
namespace modules,/es/
and/stable/
namespaces entriesMath.sumPrecise
stage 2.7 proposal:Math.sumPrecise
Promise.try
proposal:Promise.try
RegExp.escape
stage 2 proposal:Symbol.customMatcher
Symbol.customMatcher
Symbol.customMatcher
well-known symbol from the pattern matching proposal is also used in the exactors proposal, added an entry also for this proposalURL.parse
, url/825{ Object, Map }.groupBy
bug that does not support iterable primitivesArray.fromAsync
URL.parse
added and marked as supported from FF 126URL.parse
added and marked as supported from Bun 1.1.4URL.canParse
fixed and marked as supported from Bun 1.1.0Set
methods fixed in JavaScriptCore and marked as supported from Bun 1.1.1Object.setPrototypeOf
, #1329, thanks @ minseok-choeArray.from
, #1331, thanks @ minseok-choequeueMicrotask
arityURL.canParse
aritySuppressedError
extra arguments support and arityvalue
argument ofURLSearchParams.prototype.{ has, delete }
marked as supported from Bun 1.0.31Array.prototype.{ toSpliced, toReversed, with }
andatob
marked as supportedArrayBuffer.prototype.transfer
and friends proposal:ArrayBuffer.prototype.detached
ArrayBuffer.prototype.transfer
ArrayBuffer.prototype.transferToFixedLength
es.
namespace modules,/es/
and/stable/
namespaces entriesUint8Array
to / from base64 and hex proposal:Uint8Array.fromBase64
Uint8Array.fromHex
Uint8Array.prototype.toBase64
Uint8Array.prototype.toHex
/actual/
namespace entriesPromise.try
proposal has been resurrected and moved to stage 2, Febrary 2024 TC39 meetingcore-js/stage/2.7
- still emptySet.prototype.intersection
feature detectionArray.prototype.{ indexOf, lastIndexOf, includes }
, #1325, thanks @ minseok-choeArray.prototype.{ reduce, reduceRight }
, #1327, thanks @ minseok-choeArray.from
and some other methods with proxy targets, #1322, thanks @ minseok-choeArrayBuffer.prototype.transfer
and friends proposal in some specific cases in IE10-Date.prototype.toJSON
toJSON.stringify
entries dependencies{ Map, Object }.groupBy
,Promise.withResolvers
,ArrayBuffer.prototype.transfer
and friends marked as supported from Safari 17.4Set
methods fixed and marked as supported from V8 ~ Chrome 123Symbol.metadata
marked as supported from Deno 1.40.4Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: