[PR #793] [MERGED] fix(deps): bump core-js from 3.45.1 to 3.47.0 in /web #796

New issue

Closed

opened 2026-03-03 16:40:09 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:40:09 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/793
Author: @dependabot[bot]
Created: 1/1/2026
Status: ✅ Merged
Merged: 1/1/2026
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/core-js-3.47.0

📝 Commits (1)

27d2852 fix(deps): bump core-js from 3.45.1 to 3.47.0 in /web

📊 Changes

2 files changed (+8 additions, -7 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+7 -6)

📄 Description

Bumps core-js from 3.45.1 to 3.47.0.

Changelog

Sourced from core-js's changelog.

3.47.0 - 2025.11.18

Changes v3.46.0...v3.47.0 (117 commits)

JSON.parse source text access proposal :

Built-ins:

JSON.isRawJSON

JSON.parse

JSON.rawJSON

JSON.stringify

Moved to stable ES, November 2025 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespaces entries

Reworked JSON.stringify internals

Iterator sequencing proposal:

Built-ins:

Iterator.concat

Moved to stable ES, November 2025 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespaces entries

Joint iteration proposal:

Built-ins:

Iterator.zip

Iterator.zipKeyed

Moved to stage 3, November 2025 TC39 meeting

Added /actual/ namespace entries, unconditional forced replacement changed to feature detection

Fixed increasing .size in URLSearchParams.prototype.append polyfill in IE8-

Compat data improvements:

Iterator.concat marked as shipped in FF147

Map upsert proposal features marked as shipped in Safari 26.2

Math.sumPrecise marked as shipped in Safari 26.2

Uint8Array.{ fromBase64, prototype.setFromBase64 } marked as fixed in Safari 26.2

Missed Explicit Resource Management features added in Bun 1.3.0

Added Oculus Quest Browser 41 compat data mapping

Added Electron 40 compat data mapping

3.46.0 - 2025.10.09

Changes v3.45.1...v3.46.0 (116 commits)

Map upsert stage 3 proposal:

Fixed a FF WeakMap.prototype.getOrInsertComputed bug with callback calling before validation a key

Iterator chunking proposal:

Built-ins:

Iterator.prototype.chunks

Iterator.prototype.windows

Moved to stage 2.7, September 2025 TC39 meeting

Iterator.prototype.sliding method replaced with an extra parameter of Iterator.prototype.windows method, [tc39/proposal-iterator-chunking/#24](tc39/proposal-iterator-chunking#24), [tc39/proposal-iterator-chunking/#26](tc39/proposal-iterator-chunking#26)

Fixed Iterator.zip and Iterator.zipKeyed behavior with mode: 'longest' option, #1469, thanks @lionel-rowe

Fixed work of Object.groupBy and Iterator.zipKeyed together with Symbol polyfill - some cases of symbol keys on result null-prototype object were able to leak out to for-in

Compat data improvements:

Map upsert proposal features marked as shipped from FF144

Added Node 25.0 compat data mapping

Added Deno 2.5 compat data mapping

Updated Electron 39 compat data mapping

Updated Opera 121+ compat data mapping

... (truncated)

Commits

c1d2c7e v3.47.0
400f00e move JSON.parse source text access to stable ES
2b383e9 move joint iteration to stage 3
21f984c move Iterator sequencing proposal to stable ES
6add4cd add explicit "sideEffects": true to core-js and core-js-bundle packages
0f6c98d update eslint-plugin-unicorn
fe04540 fix increasing .size in URLSearchParams.prototype.append polyfill in IE8-
98d9dc4 v3.46.0
38420bd add homepage field to package.jsons
a7aee4c some fixes
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/793 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 1/1/2026 **Status:** ✅ Merged **Merged:** 1/1/2026 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/core-js-3.47.0` --- ### 📝 Commits (1) - [`27d2852`](https://github.com/NdoleStudio/httpsms/commit/27d2852c3c7b0af965b158fd9383ac0f805580a5) fix(deps): bump core-js from 3.45.1 to 3.47.0 in /web ### 📊 Changes **2 files changed** (+8 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+7 -6) </details> ### 📄 Description Bumps [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) from 3.45.1 to 3.47.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md">core-js's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/zloirock/core-js/releases/tag/v3.47.0">3.47.0 - 2025.11.18</a></h3> <ul> <li>Changes <a href="https://github.com/zloirock/core-js/compare/v3.46.0...v3.47.0">v3.46.0...v3.47.0</a> (117 commits)</li> <li><a href="https://github.com/tc39/proposal-json-parse-with-source"><code>JSON.parse</code> source text access proposal</a> : <ul> <li>Built-ins: <ul> <li><code>JSON.isRawJSON</code></li> <li><code>JSON.parse</code></li> <li><code>JSON.rawJSON</code></li> <li><code>JSON.stringify</code></li> </ul> </li> <li>Moved to stable ES, <a href="https://x.com/robpalmer2/status/1990603365236289653">November 2025 TC39 meeting</a></li> <li>Added <code>es.</code> namespace modules, <code>/es/</code> and <code>/stable/</code> namespaces entries</li> <li>Reworked <code>JSON.stringify</code> internals</li> </ul> </li> <li><a href="https://github.com/tc39/proposal-iterator-sequencing"><code>Iterator</code> sequencing proposal</a>: <ul> <li>Built-ins: <ul> <li><code>Iterator.concat</code></li> </ul> </li> <li>Moved to stable ES, <a href="https://github.com/tc39/proposals/commit/33be3cb6d6743c7cc8628c547423f49078c0b655">November 2025 TC39 meeting</a></li> <li>Added <code>es.</code> namespace modules, <code>/es/</code> and <code>/stable/</code> namespaces entries</li> </ul> </li> <li><a href="https://github.com/tc39/proposal-joint-iteration">Joint iteration proposal</a>: <ul> <li>Built-ins: <ul> <li><code>Iterator.zip</code></li> <li><code>Iterator.zipKeyed</code></li> </ul> </li> <li>Moved to stage 3, <a href="https://github.com/tc39/proposals/commit/6c0126b8f44323254c93045ee7ec216e49b83ddd">November 2025 TC39 meeting</a></li> <li>Added <code>/actual/</code> namespace entries, unconditional forced replacement changed to feature detection</li> </ul> </li> <li>Fixed increasing <code>.size</code> in <code>URLSearchParams.prototype.append</code> polyfill in IE8-</li> <li>Compat data improvements: <ul> <li><a href="https://github.com/tc39/proposal-iterator-sequencing"><code>Iterator.concat</code></a> marked as <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1986672#c4">shipped in FF147</a></li> <li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code> upsert proposal</a> features marked as shipped in Safari 26.2</li> <li><code>Math.sumPrecise</code> marked as shipped in Safari 26.2</li> <li><code>Uint8Array.{ fromBase64, prototype.setFromBase64 }</code> marked as fixed in Safari 26.2</li> <li>Missed <a href="https://github.com/tc39/proposal-explicit-resource-management">Explicit Resource Management</a> features <a href="https://bun.com/blog/bun-v1.3#disposablestack-and-asyncdisposablestack">added in Bun 1.3.0</a></li> <li>Added Oculus Quest Browser 41 compat data mapping</li> <li>Added Electron 40 compat data mapping</li> </ul> </li> </ul> <h3><a href="https://github.com/zloirock/core-js/releases/tag/v3.46.0">3.46.0 - 2025.10.09</a></h3> <ul> <li>Changes <a href="https://github.com/zloirock/core-js/compare/v3.45.1...v3.46.0">v3.45.1...v3.46.0</a> (116 commits)</li> <li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code> upsert stage 3 proposal</a>: <ul> <li>Fixed <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1988369">a FF <code>WeakMap.prototype.getOrInsertComputed</code> bug with callback calling before validation a key</a></li> </ul> </li> <li><a href="https://github.com/tc39/proposal-iterator-chunking"><code>Iterator</code> chunking proposal</a>: <ul> <li>Built-ins: <ul> <li><code>Iterator.prototype.chunks</code></li> <li><code>Iterator.prototype.windows</code></li> </ul> </li> <li>Moved to stage 2.7, <a href="https://github.com/tc39/proposals/commit/08e583103c6c244c05a26d9fee518ef8145ba2f6">September 2025 TC39 meeting</a></li> <li><code>Iterator.prototype.sliding</code> method replaced with an extra parameter of <code>Iterator.prototype.windows</code> method, [tc39/proposal-iterator-chunking/<a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/24">#24</a>](<a href="https://redirect.github.com/tc39/proposal-iterator-chunking/pull/24">tc39/proposal-iterator-chunking#24</a>), [tc39/proposal-iterator-chunking/<a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/26">#26</a>](<a href="https://redirect.github.com/tc39/proposal-iterator-chunking/pull/26">tc39/proposal-iterator-chunking#26</a>)</li> </ul> </li> <li>Fixed <a href="https://github.com/tc39/proposal-joint-iteration"><code>Iterator.zip</code> and <code>Iterator.zipKeyed</code></a> behavior with <code>mode: 'longest'</code> option, <a href="https://redirect.github.com/zloirock/core-js/issues/1469">#1469</a>, thanks <a href="https://github.com/lionel-rowe"><strong><code>@lionel-rowe</code></strong></a></li> <li>Fixed work of <code>Object.groupBy</code> and <a href="https://github.com/tc39/proposal-joint-iteration"><code>Iterator.zipKeyed</code></a> together with <code>Symbol</code> polyfill - some cases of symbol keys on result <code>null</code>-prototype object were able to leak out to <code>for-in</code></li> <li>Compat data improvements: <ul> <li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code> upsert proposal</a> features marked as shipped from FF144</li> <li>Added <a href="https://redirect.github.com/nodejs/node/pull/59896">Node 25.0</a> compat data mapping</li> <li>Added <a href="https://github.com/denoland/deno/releases/tag/v2.5.0">Deno 2.5</a> compat data mapping</li> <li>Updated Electron 39 compat data mapping</li> <li>Updated Opera 121+ compat data mapping</li> </ul> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zloirock/core-js/commit/c1d2c7e625091c16af14e4b9db10929998f7a61c"><code>c1d2c7e</code></a> v3.47.0</li> <li><a href="https://github.com/zloirock/core-js/commit/400f00eac72f04438843d4f5059cffe839b55718"><code>400f00e</code></a> move <code>JSON.parse</code> source text access to stable ES</li> <li><a href="https://github.com/zloirock/core-js/commit/2b383e9e3a6e4fc0df8081d65cf9313b2c6a1c77"><code>2b383e9</code></a> move joint iteration to stage 3</li> <li><a href="https://github.com/zloirock/core-js/commit/21f984c13f22021f06bce97198bf9b3ae86dc1e4"><code>21f984c</code></a> move <code>Iterator</code> sequencing proposal to stable ES</li> <li><a href="https://github.com/zloirock/core-js/commit/6add4cd19f354d00751898af0b83c46b00339c9c"><code>6add4cd</code></a> add explicit <code>"sideEffects": true</code> to <code>core-js</code> and <code>core-js-bundle</code> packages</li> <li><a href="https://github.com/zloirock/core-js/commit/0f6c98d1a5effbd73a036b36caa9f6002eb754be"><code>0f6c98d</code></a> update <code>eslint-plugin-unicorn</code></li> <li><a href="https://github.com/zloirock/core-js/commit/fe04540892bae116a6c6f3e9f5d6aeda2a931cb8"><code>fe04540</code></a> fix increasing <code>.size</code> in <code>URLSearchParams.prototype.append</code> polyfill in IE8-</li> <li><a href="https://github.com/zloirock/core-js/commit/98d9dc499ffa8fe7543b8cb8f613351e5b3ab8de"><code>98d9dc4</code></a> v3.46.0</li> <li><a href="https://github.com/zloirock/core-js/commit/38420bdad4bda36eea0c697bb5cecd62caa53911"><code>38420bd</code></a> add <code>homepage</code> field to <code>package.json</code>s</li> <li><a href="https://github.com/zloirock/core-js/commit/a7aee4c58a7eec4fb5958fcb6ba4f07d14446f1d"><code>a7aee4c</code></a> some fixes</li> <li>Additional commits viewable in <a href="https://github.com/zloirock/core-js/commits/v3.47.0/packages/core-js">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=core-js&package-manager=npm_and_yarn&previous-version=3.45.1&new-version=3.47.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>