[PR #373] [MERGED] fix(deps): bump core-js from 3.33.2 to 3.36.0 in /web #396

New issue

Closed

opened 2026-03-03 16:38:11 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:38:11 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/373
Author: @dependabot[bot]
Created: 3/1/2024
Status: ✅ Merged
Merged: 3/2/2024
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/core-js-3.36.0

📝 Commits (1)

a1568c8 fix(deps): bump core-js from 3.33.2 to 3.36.0 in /web

📊 Changes

2 files changed (+261 additions, -116 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+260 -115)

📄 Description

Bumps core-js from 3.33.2 to 3.36.0.

Changelog

Sourced from core-js's changelog.

3.36.0 - 2024.02.14

ArrayBuffer.prototype.transfer and friends proposal:

Built-ins:

ArrayBuffer.prototype.detached

ArrayBuffer.prototype.transfer

ArrayBuffer.prototype.transferToFixedLength

Moved to stable ES, Febrary 2024 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespaces entries

Uint8Array to / from base64 and hex proposal:

Methods:

Uint8Array.fromBase64

Uint8Array.fromHex

Uint8Array.prototype.toBase64

Uint8Array.prototype.toHex

Moved to stage 3, Febrary 2024 TC39 meeting

Added /actual/ namespace entries

Skipped adding new methods of writing to existing arrays to clarification some moments

Promise.try proposal has been resurrected and moved to stage 2, Febrary 2024 TC39 meeting

Added an entry point for the new TC39 proposals stage - core-js/stage/2.7 - still empty

Fixed regression in Set.prototype.intersection feature detection

Fixed a missed check in Array.prototype.{ indexOf, lastIndexOf, includes }, #1325, thanks @minseok-choe

Fixed a missed check in Array.prototype.{ reduce, reduceRight }, #1327, thanks @minseok-choe

Fixed Array.from and some other methods with proxy targets, #1322, thanks @minseok-choe

Fixed dependencies loading for modules from ArrayBuffer.prototype.transfer and friends proposal in some specific cases in IE10-

Dropped context workaround from collection static methods entries since with current methods semantic it's no longer required

Added instance methods polyfills to entries of collections static methods that produce collection instances

Added missed Date.prototype.toJSON to JSON.stringify entries dependencies

Added debugging info in some missed cases

Compat data improvements:

{ Map, Object }.groupBy, Promise.withResolvers, ArrayBuffer.prototype.transfer and friends marked as supported from Safari 17.4

New Set methods fixed and marked as supported from V8 ~ Chrome 123

Added Deno 1.40 compat data mapping

Symbol.metadata marked as supported from Deno 1.40.4

Updated Electron 30 compat data mapping

3.35.1 - 2024.01.21

Fixed internal ToLength operation with bigints, #1318

Removed significant redundant code from String.prototype.split polyfill

Fixed setting names of methods with symbol keys in some old engines

Minor fix of prototype methods export logic in the pure version

Compat data improvements:

Iterator helpers proposal methods marked as supported from V8 ~ Chrome 122

Note that V8 ~ Chrome 122 add Set methods, but they have a bug similar to Safari

self marked as fixed from Bun 1.0.22

SuppressedError and Symbol.{ dispose, asyncDispose } marked as supported from Bun 1.0.23

Added Oculus Quest Browser 31 compat data mapping

Updated Electron 29 and added Electron 30 compat data mapping

3.35.0 - 2023.12.29

{ Map, Set, WeakMap, WeakSet }.{ from, of } became non-generic, following this and some other notes. Now they can be invoked without this, but no longer return subclass instances

... (truncated)

Commits

77123c4 3.36.0
a3d51ed fix dependencies loading for modules from ArrayBuffer.prototype.transfer an...
b90f2f5 add an entry point for the new TC39 proposals stage - core-js/stage/2.7 - s...
5e68a01 move Uint8Array to / from base64 and hex proposal to stage 3
4c51d71 move ArrayBuffer.prototype.transfer and friends to stable ES
3348b1a move Promise.try to stage 2
e7f6af0 use a constant as a error message
b36ca26 Merge pull request #1328 from minseok-choe/fix/issue-flat, close #1327
661eab7 add debugging info in some missed cases
96da3a4 Add missed check in array-reduce.js
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/373 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/1/2024 **Status:** ✅ Merged **Merged:** 3/2/2024 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/core-js-3.36.0` --- ### 📝 Commits (1) - [`a1568c8`](https://github.com/NdoleStudio/httpsms/commit/a1568c86355bccf3a92da2fae36f826d0300ab17) fix(deps): bump core-js from 3.33.2 to 3.36.0 in /web ### 📊 Changes **2 files changed** (+261 additions, -116 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+260 -115) </details> ### 📄 Description Bumps [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) from 3.33.2 to 3.36.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md">core-js's changelog</a>.</em></p> <blockquote> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.36.0">3.36.0 - 2024.02.14</a></h5> <ul> <li><a href="https://github.com/tc39/proposal-arraybuffer-transfer"><code>ArrayBuffer.prototype.transfer</code> and friends proposal</a>: <ul> <li>Built-ins: <ul> <li><code>ArrayBuffer.prototype.detached</code></li> <li><code>ArrayBuffer.prototype.transfer</code></li> <li><code>ArrayBuffer.prototype.transferToFixedLength</code></li> </ul> </li> <li>Moved to stable ES, <a href="https://github.com/tc39/proposals/commit/c84d3dde9a7d8ee4410ffa28624fc4c39247faca">Febrary 2024 TC39 meeting</a></li> <li>Added <code>es.</code> namespace modules, <code>/es/</code> and <code>/stable/</code> namespaces entries</li> </ul> </li> <li><a href="https://github.com/tc39/proposal-arraybuffer-base64"><code>Uint8Array</code> to / from base64 and hex proposal</a>: <ul> <li>Methods: <ul> <li><code>Uint8Array.fromBase64</code></li> <li><code>Uint8Array.fromHex</code></li> <li><code>Uint8Array.prototype.toBase64</code></li> <li><code>Uint8Array.prototype.toHex</code></li> </ul> </li> <li>Moved to stage 3, <a href="https://github.com/tc39/proposals/commit/278ab28b8f849f2110d770e7b034b7ef59f14daf">Febrary 2024 TC39 meeting</a></li> <li>Added <code>/actual/</code> namespace entries</li> <li>Skipped adding new methods of writing to existing arrays to clarification some moments</li> </ul> </li> <li><a href="https://github.com/tc39/proposal-promise-try"><code>Promise.try</code> proposal</a> has been resurrected and moved to stage 2, <a href="https://redirect.github.com/tc39/proposal-promise-try/issues/15">Febrary 2024 TC39 meeting</a></li> <li>Added an entry point for <a href="https://tc39.es/process-document/">the new TC39 proposals stage</a> - <code>core-js/stage/2.7</code> - still empty</li> <li>Fixed regression in <code>Set.prototype.intersection</code> feature detection</li> <li>Fixed a missed check in <code>Array.prototype.{ indexOf, lastIndexOf, includes }</code>, <a href="https://redirect.github.com/zloirock/core-js/issues/1325">#1325</a>, thanks <a href="https://github.com/minseok-choe"><strong><code>@minseok-choe</code></strong></a></li> <li>Fixed a missed check in <code>Array.prototype.{ reduce, reduceRight }</code>, <a href="https://redirect.github.com/zloirock/core-js/issues/1327">#1327</a>, thanks <a href="https://github.com/minseok-choe"><strong><code>@minseok-choe</code></strong></a></li> <li>Fixed <code>Array.from</code> and some other methods with proxy targets, <a href="https://redirect.github.com/zloirock/core-js/issues/1322">#1322</a>, thanks <a href="https://github.com/minseok-choe"><strong><code>@minseok-choe</code></strong></a></li> <li>Fixed dependencies loading for modules from <code>ArrayBuffer.prototype.transfer</code> and friends proposal in some specific cases in IE10-</li> <li>Dropped context workaround from collection static methods entries since with current methods semantic it's no longer required</li> <li>Added instance methods polyfills to entries of collections static methods that produce collection instances</li> <li>Added missed <code>Date.prototype.toJSON</code> to <code>JSON.stringify</code> entries dependencies</li> <li>Added debugging info in some missed cases</li> <li>Compat data improvements: <ul> <li><a href="https://github.com/tc39/proposal-array-grouping"><code>{ Map, Object }.groupBy</code></a>, <a href="https://github.com/tc39/proposal-promise-with-resolvers"><code>Promise.withResolvers</code></a>, <a href="https://github.com/tc39/proposal-arraybuffer-transfer"><code>ArrayBuffer.prototype.transfer</code> and friends</a> marked as supported from <a href="https://developer.apple.com/documentation/safari-release-notes/safari-17_4-release-notes#JavaScript">Safari 17.4</a></li> <li><a href="https://github.com/tc39/proposal-set-methods">New <code>Set</code> methods</a> <a href="https://bugs.chromium.org/p/v8/issues/detail?id=14559#c4">fixed</a> and marked as supported from V8 ~ Chrome 123</li> <li>Added <a href="https://deno.com/blog/v1.40">Deno 1.40</a> compat data mapping</li> <li><code>Symbol.metadata</code> marked as supported from <a href="https://github.com/denoland/deno/releases/tag/v1.40.4">Deno 1.40.4</a></li> <li>Updated Electron 30 compat data mapping</li> </ul> </li> </ul> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.35.1">3.35.1 - 2024.01.21</a></h5> <ul> <li>Fixed internal <code>ToLength</code> operation with bigints, <a href="https://redirect.github.com/zloirock/core-js/issues/1318">#1318</a></li> <li>Removed significant redundant code from <code>String.prototype.split</code> polyfill</li> <li>Fixed setting names of methods with symbol keys in some old engines</li> <li>Minor fix of prototype methods export logic in the pure version</li> <li>Compat data improvements: <ul> <li><a href="https://github.com/tc39/proposal-iterator-helpers"><code>Iterator</code> helpers proposal</a> methods marked as supported from V8 ~ Chrome 122</li> <li>Note that V8 ~ Chrome 122 add <a href="https://github.com/tc39/proposal-set-methods"><code>Set</code> methods</a>, but they have <a href="https://bugs.chromium.org/p/v8/issues/detail?id=14559">a bug</a> <a href="https://bugs.webkit.org/show_bug.cgi?id=267494">similar to Safari</a></li> <li><code>self</code> marked as fixed from Bun 1.0.22</li> <li><a href="https://github.com/tc39/proposal-explicit-resource-management"><code>SuppressedError</code> and <code>Symbol.{ dispose, asyncDispose }</code></a> marked as <a href="https://bun.sh/blog/bun-v1.0.23#resource-management-is-now-supported">supported from Bun 1.0.23</a></li> <li>Added Oculus Quest Browser 31 compat data mapping</li> <li>Updated Electron 29 and added Electron 30 compat data mapping</li> </ul> </li> </ul> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.35.0">3.35.0 - 2023.12.29</a></h5> <ul> <li><a href="https://github.com/tc39/proposal-setmap-offrom"><code>{ Map, Set, WeakMap, WeakSet }.{ from, of }</code></a> became non-generic, following <a href="https://redirect.github.com/tc39/proposal-setmap-offrom/issues/16#issuecomment-1843346541">this</a> and some other notes. Now they can be invoked without <code>this</code>, but no longer return subclass instances</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zloirock/core-js/commit/77123c42d3bee524768f1f8495fd3404892ff910"><code>77123c4</code></a> 3.36.0</li> <li><a href="https://github.com/zloirock/core-js/commit/a3d51ed5196d9dd6fdc304e0898f6bef0c27da75"><code>a3d51ed</code></a> fix dependencies loading for modules from <code>ArrayBuffer.prototype.transfer</code> an...</li> <li><a href="https://github.com/zloirock/core-js/commit/b90f2f5678e104315c5ea6afb6b671010f38dbd9"><code>b90f2f5</code></a> add an entry point for the new TC39 proposals stage - <code>core-js/stage/2.7</code> - s...</li> <li><a href="https://github.com/zloirock/core-js/commit/5e68a01dc8dd6c5ff7b668dff1016769461ed812"><code>5e68a01</code></a> move <code>Uint8Array</code> to / from base64 and hex proposal to stage 3</li> <li><a href="https://github.com/zloirock/core-js/commit/4c51d71f82eb731ae1e07a9f4af997e09d0de48b"><code>4c51d71</code></a> move <code>ArrayBuffer.prototype.transfer</code> and friends to stable ES</li> <li><a href="https://github.com/zloirock/core-js/commit/3348b1a6117be25ac3ecaba78ee24d2dfc9e1bb6"><code>3348b1a</code></a> move <code>Promise.try</code> to stage 2</li> <li><a href="https://github.com/zloirock/core-js/commit/e7f6af07928c3b11cf7dba89349d0110873d370a"><code>e7f6af0</code></a> use a constant as a error message</li> <li><a href="https://github.com/zloirock/core-js/commit/b36ca26b8eb16c7f1cd5e2ceced55e105827f1de"><code>b36ca26</code></a> Merge pull request <a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/1328">#1328</a> from minseok-choe/fix/issue-flat, close <a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/1327">#1327</a></li> <li><a href="https://github.com/zloirock/core-js/commit/661eab74953bdbd34bef63ee87c215b6c329176c"><code>661eab7</code></a> add debugging info in some missed cases</li> <li><a href="https://github.com/zloirock/core-js/commit/96da3a4db14056b2feb4419c78c51e7d4bcc1028"><code>96da3a4</code></a> Add missed check in array-reduce.js</li> <li>Additional commits viewable in <a href="https://github.com/zloirock/core-js/commits/v3.36.0/packages/core-js">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=core-js&package-manager=npm_and_yarn&previous-version=3.33.2&new-version=3.36.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>