[Snyk] Upgrade core-js from 3.27.2 to 3.28.0

[snyk-bot]

Snyk has created this PR to upgrade core-js from 3.27.2 to 3.28.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 22 days ago, on 2023-02-13.

Release notes

Package name: core-js

• 3.28.0 - 2023-02-13
  

  I highly recommend reading this: So, what's next?

  • Change Array by copy proposal:
    • Methods:
      • Array.prototype.toReversed
      • Array.prototype.toSorted
      • Array.prototype.toSpliced
      • Array.prototype.with
      • %TypedArray%.prototype.toReversed
      • %TypedArray%.prototype.toSorted
      • %TypedArray%.prototype.with
    • Moved to stable ES, January 2023 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespaces entries
  • Added JSON.parse source text access Stage 3 proposal
    • Methods:
      • JSON.parse patched for support source in reviver function arguments
      • JSON.rawJSON
      • JSON.isRawJSON
      • JSON.stringify patched for support JSON.rawJSON
  • Added ArrayBuffer.prototype.transfer and friends Stage 3 proposal:
    • Built-ins:
      • ArrayBuffer.prototype.detached
      • ArrayBuffer.prototype.transfer (only in runtimes with native structuredClone with ArrayBuffer transfer support)
      • ArrayBuffer.prototype.transferToFixedLength (only in runtimes with native structuredClone with ArrayBuffer transfer support)
    • In backwards, in runtimes with native ArrayBuffer.prototype.transfer, but without proper structuredClone, added ArrayBuffer transfer support to structuredClone polyfill
  • Iterator Helpers proposal:
    • Splitted into 2 (sync and async) proposals, async version moved back to Stage 2, January 2023 TC39 meeting
    • Allowed interleaved mapping in AsyncIterator helpers, proposal-iterator-helpers/262
  • Explicit Resource Management Stage 3 and Async Explicit Resource Management Stage 2 proposals:
    • InstallErrorCause removed from SuppressedError, January 2023 TC39 meeting, proposal-explicit-resource-management/145
    • Simplified internal behaviour of { AsyncDisposableStack, DisposableStack }.prototype.use, proposal-explicit-resource-management/143
  • Added Symbol predicates Stage 2 proposal
    • Methods:
      • Symbol.isRegistered
      • Symbol.isWellKnown
  • Number.range Stage 1 proposal and method renamed to Iterator.range
  • Function.prototype.unThis Stage 0 proposal and method renamed to Function.prototype.demethodize
  • Fixed Safari String.prototype.toWellFormed ToString conversion bug
  • Improved some cases handling of array-replacer in JSON.stringify symbols handling fix
  • Fixed many other old JSON.{ parse, stringify } bugs (numbers instead of strings as keys in replacer, handling negative zeroes, spaces, some more handling symbols cases, etc.)
  • Fixed configurability and ToString conversion of some accessors
  • Added throwing proper errors on an incorrect context in some ArrayBuffer and DataView methods
  • Some minor DataView and %TypedArray% polyfills optimizations
  • Added proper error on the excess number of trailing = in the atob polyfill
  • Fixed theoretically possible ReDoS vulnerabilities in String.prototype.{ trim, trimEnd, trimRight }, parse(Int|Float), Number, atob, and URL polyfills in some ancient engines
  • Compat data improvements:
    • RegExp.prototype.flags marked as fixed from V8 ~ Chrome 111
    • Added Opera Android 73 compat data mapping
  • Added TypeScript definitions to core-js-builder
• 3.27.2 - 2023-01-18
  
  • Set methods proposal updates:
    • Closing of iterators of Set-like objects on early exit, proposal-set-methods/85
    • Some other minor internal changes
  • Added one more workaround of a webpack dev server bug on IE global methods, #1161
  • Fixed possible String.{ raw, cooked } error with empty template array
  • Used non-standard V8 Error.captureStackTrace instead of stack parsing in new error classes / wrappers where it's possible
  • Added detection correctness of iteration to Promise.{ allSettled, any } feature detection, Hermes issue
  • Compat data improvements:
    • Change Array by copy proposal marked as supported from V8 ~ Chrome 110
    • Added Samsung Internet 20 compat data mapping
    • Added Quest Browser 25 compat data mapping
    • Added React Native 0.71 Hermes compat data
    • Added Electron 23 and 24 compat data mapping
    • self marked as fixed in Deno 1.29.3, deno/17362
  • Minor tweaks of minification settings for core-js-bundle
  • Refactoring, some minor fixes, improvements, optimizations

from core-js GitHub release notes

Commit messages

Package name: core-js

• 6f721fa refresh
• 93ad467 3.28.0
• 91e0347 so, what's next?
• 879b7aa update the changelog
• 59920a1 Merge pull request #1174 from zloirock/array-buffer-transfer
• 39c079b throw proper errors on an incorrect context in some `ArrayBuffer` and `DataView` methods
• 7e0399d some fixes
• 139abbf add `ArrayBuffer.prototype.transfer` and friends Stage 3 proposal
• 081d6f8 mark `RegExp.prototype.flags` as fixed from V8 ~ Chrome 111
• 6fe17a9 update dependencies
• 44cf9e8 fix theoretically possible ReDoS vulnerabilities
• 17081e2 workaround FF20- enumeration order issue in tests
• 70aab09 some stylistic changes
• 4f000a1 disable duplicate proto test for Chrome 27- with non-redefinable proto
• 2e44954 fix Safari 9 `JSON.parse` bug with handling negative zero + some whitespaces
• 2af87cc disable `JSON.stringify` property order test
• f3b4e9b Merge pull request #1168 from zloirock/json
• e8f2981 fix a signature
• be7ea2c improve handling of strings wrapped to `rawJSON`
• eb0327f update docs
• 8373774 add some tests
• bd069bc add some tests
• 6c57b04 add some tests
• e21fe93 add some tests

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs