[PR #507] [MERGED] fix(deps): bump core-js from 3.37.1 to 3.38.1 in /web #519

New issue

Closed

opened 2026-03-03 16:38:47 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:38:47 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/507
Author: @dependabot[bot]
Created: 9/1/2024
Status: ✅ Merged
Merged: 9/2/2024
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/core-js-3.38.1

📝 Commits (1)

61a8072 fix(deps): bump core-js from 3.37.1 to 3.38.1 in /web

📊 Changes

2 files changed (+7 additions, -7 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+6 -6)

📄 Description

Bumps core-js from 3.37.1 to 3.38.1.

Changelog

Sourced from core-js's changelog.

3.38.1 - 2024.08.20

Changes v3.38.0...v3.38.1

Fixed some cases of URLSearchParams percent decoding, #1357, #1361, thanks @slowcheetah

Some stylistic changes and minor optimizations

Compat data improvements:

Iterator helpers proposal methods marked as shipped from FF131

Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from Bun 1.1.23

RegExp.escape marked as shipped from Bun 1.1.22

Promise.try marked as shipped from Bun 1.1.22

Uint8Array to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22

Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes

Added Opera Android 84 compat data mapping

3.38.0 - 2024.08.05

Changes v3.37.1...v3.38.0

RegExp.escape proposal:

Built-ins:

RegExp.escape

Moved to stage 3, June 2024 and July 2024 TC39 meetings

Updated the way of escaping, regex-escaping/77

Throw an error on non-strings, regex-escaping/58

Added /actual/ namespace entries, unconditional forced replacement changed to feature detection

Promise.try proposal:

Built-ins:

Promise.try

Moved to stage 3, June 2024 TC39 meeting

Added /actual/ namespace entries, unconditional forced replacement changed to feature detection

Uint8Array to / from base64 and hex stage 3 proposal:

Built-ins:

Uint8Array.fromBase64

Uint8Array.fromHex

Uint8Array.prototype.setFromBase64

Uint8Array.prototype.setFromHex

Uint8Array.prototype.toBase64

Uint8Array.prototype.toHex

Added Uint8Array.prototype.{ setFromBase64, setFromHex } methods

Added Uint8Array.fromBase64 and Uint8Array.prototype.setFromBase64 lastChunkHandling option, proposal-arraybuffer-base64/33

Added Uint8Array.prototype.toBase64 omitPadding option, proposal-arraybuffer-base64/60

Added throwing a TypeError on arrays backed by detached buffers

Unconditional forced replacement changed to feature detection

Fixed RegExp named capture groups polyfill in combination with non-capturing groups, #1352, thanks @Ulop

Improved some cases of environment detection

Uses process.getBuiltinModule for getting built-in NodeJS modules where it's available

Uses https instead of http in URL constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345

Some minor optimizations

Updated browserslist in core-js-compat dependencies that fixes an upstream issue with incorrect interpretation of some browserslist queries, #1344, browserslist/829, browserslist/836

Compat data improvements:

Added Safari 18.0 compat data:

Fixed Object.groupBy and Map.groupBy to work for non-objects

Fixed throwing a RangeError if Set methods are called on an object with negative size property

... (truncated)

Commits

d1e7889 v3.38.1
9294082 use self-compare NaN check
a79f40a Percent decode (#1361)
85f3639 enable some eslint sonar rules
5b69af0 use null instead of undefined as an empty placeholder in some cases
9cc1d63 use git+ in pkg.repository.url of all packages
beccd4f enable some eslint sonar rules
b35e68e enable sonar/inconsistent-function-call
4a322bf v3.38.0
9408792 replace a regex with a simple comparison
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/507 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 9/1/2024 **Status:** ✅ Merged **Merged:** 9/2/2024 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/core-js-3.38.1` --- ### 📝 Commits (1) - [`61a8072`](https://github.com/NdoleStudio/httpsms/commit/61a8072cbb392448a361916ace4ff5641050527e) fix(deps): bump core-js from 3.37.1 to 3.38.1 in /web ### 📊 Changes **2 files changed** (+7 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+6 -6) </details> ### 📄 Description Bumps [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) from 3.37.1 to 3.38.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md">core-js's changelog</a>.</em></p> <blockquote> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.38.1">3.38.1 - 2024.08.20</a></h5> <ul> <li>Changes <a href="https://github.com/zloirock/core-js/compare/v3.38.0...v3.38.1">v3.38.0...v3.38.1</a></li> <li>Fixed some cases of <code>URLSearchParams</code> percent decoding, <a href="https://redirect.github.com/zloirock/core-js/issues/1357">#1357</a>, <a href="https://redirect.github.com/zloirock/core-js/pull/1361">#1361</a>, thanks <a href="https://github.com/slowcheetah"><strong><code>@slowcheetah</code></strong></a></li> <li>Some stylistic changes and minor optimizations</li> <li>Compat data improvements: <ul> <li><a href="https://github.com/tc39/proposal-iterator-helpers"><code>Iterator</code> helpers proposal</a> methods marked as <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1896390">shipped from FF131</a></li> <li><a href="https://github.com/tc39/proposal-float16array"><code>Math.f16round</code> and <code>DataView.prototype.{ getFloat16, setFloat16 }</code></a> marked as shipped from Bun 1.1.23</li> <li><a href="https://github.com/tc39/proposal-regex-escaping"><code>RegExp.escape</code></a> marked as shipped from Bun 1.1.22</li> <li><a href="https://github.com/tc39/proposal-promise-try"><code>Promise.try</code></a> marked as shipped from Bun 1.1.22</li> <li><a href="https://github.com/tc39/proposal-arraybuffer-base64"><code>Uint8Array</code> to / from base64 and hex proposal</a> methods marked as shipped from Bun 1.1.22</li> <li>Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes</li> <li>Added Opera Android 84 compat data mapping</li> </ul> </li> </ul> <h5><a href="https://github.com/zloirock/core-js/releases/tag/v3.38.0">3.38.0 - 2024.08.05</a></h5> <ul> <li>Changes <a href="https://github.com/zloirock/core-js/compare/v3.37.1...v3.38.0">v3.37.1...v3.38.0</a></li> <li><a href="https://github.com/tc39/proposal-regex-escaping"><code>RegExp.escape</code> proposal</a>: <ul> <li>Built-ins: <ul> <li><code>RegExp.escape</code></li> </ul> </li> <li>Moved to stage 3, <a href="https://github.com/tc39/proposals/commit/4b8ee265248abfa2c88ed71b3c541ddd5a2eaffe">June 2024</a> and <a href="https://github.com/tc39/proposals/commit/bdb2eea6c5e41a52f2d6047d7de1a31b5d188c4f">July 2024</a> TC39 meetings</li> <li>Updated the way of escaping, <a href="https://redirect.github.com/tc39/proposal-regex-escaping/pull/77">regex-escaping/77</a></li> <li>Throw an error on non-strings, <a href="https://redirect.github.com/tc39/proposal-regex-escaping/pull/58">regex-escaping/58</a></li> <li>Added <code>/actual/</code> namespace entries, unconditional forced replacement changed to feature detection</li> </ul> </li> <li><a href="https://github.com/tc39/proposal-promise-try"><code>Promise.try</code> proposal</a>: <ul> <li>Built-ins: <ul> <li><code>Promise.try</code></li> </ul> </li> <li>Moved to stage 3, <a href="https://github.com/tc39/proposals/commit/de20984cd7f7bc616682c557cb839abc100422cb">June 2024 TC39 meeting</a></li> <li>Added <code>/actual/</code> namespace entries, unconditional forced replacement changed to feature detection</li> </ul> </li> <li><a href="https://github.com/tc39/proposal-arraybuffer-base64"><code>Uint8Array</code> to / from base64 and hex stage 3 proposal</a>: <ul> <li>Built-ins: <ul> <li><code>Uint8Array.fromBase64</code></li> <li><code>Uint8Array.fromHex</code></li> <li><code>Uint8Array.prototype.setFromBase64</code></li> <li><code>Uint8Array.prototype.setFromHex</code></li> <li><code>Uint8Array.prototype.toBase64</code></li> <li><code>Uint8Array.prototype.toHex</code></li> </ul> </li> <li>Added <code>Uint8Array.prototype.{ setFromBase64, setFromHex }</code> methods</li> <li>Added <code>Uint8Array.fromBase64</code> and <code>Uint8Array.prototype.setFromBase64</code> <code>lastChunkHandling</code> option, <a href="https://redirect.github.com/tc39/proposal-arraybuffer-base64/pull/33">proposal-arraybuffer-base64/33</a></li> <li>Added <code>Uint8Array.prototype.toBase64</code> <code>omitPadding</code> option, <a href="https://redirect.github.com/tc39/proposal-arraybuffer-base64/pull/60">proposal-arraybuffer-base64/60</a></li> <li>Added throwing a <code>TypeError</code> on arrays backed by detached buffers</li> <li>Unconditional forced replacement changed to feature detection</li> </ul> </li> <li>Fixed <code>RegExp</code> named capture groups polyfill in combination with non-capturing groups, <a href="https://redirect.github.com/zloirock/core-js/pull/1352">#1352</a>, thanks <a href="https://github.com/Ulop"><strong><code>@Ulop</code></strong></a></li> <li>Improved some cases of environment detection</li> <li>Uses <a href="https://nodejs.org/docs/latest/api/process.html#processgetbuiltinmoduleid"><code>process.getBuiltinModule</code></a> for getting built-in NodeJS modules where it's available</li> <li>Uses <code>https</code> instead of <code>http</code> in <code>URL</code> constructor feature detection to avoid extra notifications from some overly vigilant security scanners, <a href="https://redirect.github.com/zloirock/core-js/issues/1345">#1345</a></li> <li>Some minor optimizations</li> <li>Updated <code>browserslist</code> in <code>core-js-compat</code> dependencies that fixes an upstream issue with incorrect interpretation of some <code>browserslist</code> queries, <a href="https://redirect.github.com/zloirock/core-js/issues/1344">#1344</a>, <a href="https://redirect.github.com/browserslist/browserslist/issues/829">browserslist/829</a>, <a href="https://redirect.github.com/browserslist/browserslist/pull/836">browserslist/836</a></li> <li>Compat data improvements: <ul> <li>Added <a href="https://webkit.org/blog/15443/news-from-wwdc24-webkit-in-safari-18-beta/">Safari 18.0</a> compat data: <ul> <li>Fixed <a href="https://github.com/tc39/proposal-array-grouping"><code>Object.groupBy</code> and <code>Map.groupBy</code></a> to <a href="https://bugs.webkit.org/show_bug.cgi?id=271524">work for non-objects</a></li> <li>Fixed <a href="https://bugs.webkit.org/show_bug.cgi?id=267494">throwing a <code>RangeError</code> if <code>Set</code> methods are called on an object with negative size property</a></li> </ul> </li> </ul> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zloirock/core-js/commit/d1e7889678f9d09ee4bb1d6bbd3184462567c730"><code>d1e7889</code></a> v3.38.1</li> <li><a href="https://github.com/zloirock/core-js/commit/92940826fbebdd950333a5b0a35728c554f674cf"><code>9294082</code></a> use self-compare <code>NaN</code> check</li> <li><a href="https://github.com/zloirock/core-js/commit/a79f40a96aae0fa724196771ce6139d83dbafb21"><code>a79f40a</code></a> Percent decode (<a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/1361">#1361</a>)</li> <li><a href="https://github.com/zloirock/core-js/commit/85f3639fb667cce7e40afc9ccf0bf5a30815aaf9"><code>85f3639</code></a> enable some <code>eslint</code> <code>sonar</code> rules</li> <li><a href="https://github.com/zloirock/core-js/commit/5b69af043d39a1c8915146306b401be15fffc1d7"><code>5b69af0</code></a> use <code>null</code> instead of <code>undefined</code> as an empty placeholder in some cases</li> <li><a href="https://github.com/zloirock/core-js/commit/9cc1d632f97f9fe1db7aa0b28268ef6a0ee37985"><code>9cc1d63</code></a> use <code>git+</code> in <code>pkg.repository.url</code> of all packages</li> <li><a href="https://github.com/zloirock/core-js/commit/beccd4f65353e1d9d157b3552c318927b434c7f2"><code>beccd4f</code></a> enable some <code>eslint</code> <code>sonar</code> rules</li> <li><a href="https://github.com/zloirock/core-js/commit/b35e68e2d6b9ed7a069375f1e8c18c1f615eec46"><code>b35e68e</code></a> enable <code>sonar/inconsistent-function-call</code></li> <li><a href="https://github.com/zloirock/core-js/commit/4a322bf3a89fd4579b938ab09941b509f9db7136"><code>4a322bf</code></a> v3.38.0</li> <li><a href="https://github.com/zloirock/core-js/commit/9408792f1e3427fd052119f4c13d7e275cc7eb28"><code>9408792</code></a> replace a regex with a simple comparison</li> <li>Additional commits viewable in <a href="https://github.com/zloirock/core-js/commits/v3.38.1/packages/core-js">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=core-js&package-manager=npm_and_yarn&previous-version=3.37.1&new-version=3.38.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>