[PR #824] [MERGED] fix(deps): bump core-js from 3.47.0 to 3.48.0 in /web #822

New issue

Closed

opened 2026-03-03 16:40:18 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:40:18 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/824
Author: @dependabot[bot]
Created: 2/1/2026
Status: ✅ Merged
Merged: 2/1/2026
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/core-js-3.48.0

📝 Commits (1)

c4922eb fix(deps): bump core-js from 3.47.0 to 3.48.0 in /web

📊 Changes

2 files changed (+8 additions, -7 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+7 -6)

📄 Description

Bumps core-js from 3.47.0 to 3.48.0.

Changelog

Sourced from core-js's changelog.

3.48.0 - 2026.01.21

Changes v3.47.0...v3.48.0 (126 commits)

Map upsert proposal:

Built-ins:

Map.prototype.getOrInsert

Map.prototype.getOrInsertComputed

WeakMap.prototype.getOrInsert

WeakMap.prototype.getOrInsertComputed

Moved to stable ES, January 2026 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespaces entries

Use CreateDataProperty / CreateDataPropertyOrThrow in some missed cases, #1497

Minor fix / optimization in the RegExp constructor (NCG and dotAll) polyfill

Added some more workarounds for a Safari < 13 bug with silent ignore of non-writable array .length

Added detection of a Webkit bug: Iterator.prototype.flatMap throws on iterator without return method

Added detection of a V8 ~ Chromium < 144 bug: Uint8Array.prototype.setFromHex throws an error on length-tracking views over ResizableArrayBuffer

Compat data improvements:

Map upsert proposal features marked as shipped in V8 ~ Chrome 145

Joint iteration proposal features marked as shipped in FF148

Iterator.concat marked as shipped in Bun 1.3.7

Added Rhino 1.9.0 compat data

Added Deno 2.6 compat data mapping

Added Opera Android 93 and 94 compat data mapping

Added Electron 41 compat data mapping

Iterator.prototype.flatMap marked as supported from Safari 26.2 and Bun 1.2.21 because of a bug: throws on iterator without return method

Uint8Array.prototype.setFromHex marked as supported from V8 ~ Chromium 144 because of a bug: throws an error on length-tracking views over ResizableArrayBuffer

Commits

5d657da v3.48.0
5644e73 Add bug detection for Uint8Array.prototype.setFromHex
804a10e Merge pull request #1501 from zloirock/flat-map-fix
45d7fe3 Add bug detection to Iterator flatMap method
efd9c2f move Map upsert proposal to stable ES
dcb938d update the year and normalize the copyright wording
5454a5d add some more workarounds for a Safari < 13 bug with silent ignore of non-wri...
73d4b6c add some more createProperty cases
9c89290 fix: spec compliance for Array.prototype.flat and flatMap
e3774ce fix: use createProperty in Array.prototype.filter
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/824 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/1/2026 **Status:** ✅ Merged **Merged:** 2/1/2026 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/core-js-3.48.0` --- ### 📝 Commits (1) - [`c4922eb`](https://github.com/NdoleStudio/httpsms/commit/c4922ebca9d635c1e4d6b3e53b239ad135605b34) fix(deps): bump core-js from 3.47.0 to 3.48.0 in /web ### 📊 Changes **2 files changed** (+8 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+7 -6) </details> ### 📄 Description Bumps [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) from 3.47.0 to 3.48.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md">core-js's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/zloirock/core-js/releases/tag/v3.48.0">3.48.0 - 2026.01.21</a></h3> <ul> <li>Changes <a href="https://github.com/zloirock/core-js/compare/v3.47.0...v3.48.0">v3.47.0...v3.48.0</a> (126 commits)</li> <li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code> upsert proposal</a>: <ul> <li>Built-ins: <ul> <li><code>Map.prototype.getOrInsert</code></li> <li><code>Map.prototype.getOrInsertComputed</code></li> <li><code>WeakMap.prototype.getOrInsert</code></li> <li><code>WeakMap.prototype.getOrInsertComputed</code></li> </ul> </li> <li>Moved to stable ES, <a href="https://github.com/tc39/proposals/commit/131e53d6c9e658c6439831a167ed3f7897daf160">January 2026 TC39 meeting</a></li> <li>Added <code>es.</code> namespace modules, <code>/es/</code> and <code>/stable/</code> namespaces entries</li> </ul> </li> <li>Use <code>CreateDataProperty</code> / <code>CreateDataPropertyOrThrow</code> in some missed cases, <a href="https://redirect.github.com/zloirock/core-js/issues/1497">#1497</a></li> <li>Minor fix / optimization in the <code>RegExp</code> constructor (NCG and <code>dotAll</code>) polyfill</li> <li>Added some more workarounds for a Safari < 13 bug with silent ignore of non-writable array <code>.length</code></li> <li>Added detection of a Webkit <a href="https://bugs.webkit.org/show_bug.cgi?id=297532">bug</a>: <code>Iterator.prototype.flatMap</code> throws on iterator without <code>return</code> method</li> <li>Added detection of a V8 ~ Chromium < 144 <a href="https://issues.chromium.org/issues/454630441">bug</a>: <code>Uint8Array.prototype.setFromHex</code> throws an error on length-tracking views over ResizableArrayBuffer</li> <li>Compat data improvements: <ul> <li><a href="https://github.com/tc39/proposal-upsert"><code>Map</code> upsert proposal</a> features marked as <a href="https://issues.chromium.org/issues/434977728#comment4">shipped in V8 ~ Chrome 145</a></li> <li><a href="https://github.com/tc39/proposal-joint-iteration">Joint iteration proposal</a> features marked as <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=2003333#c8">shipped in FF148</a></li> <li><a href="https://github.com/tc39/proposal-iterator-sequencing"><code>Iterator.concat</code></a> marked as shipped in Bun 1.3.7</li> <li>Added <a href="https://github.com/mozilla/rhino/releases/tag/Rhino1_9_0_Release">Rhino 1.9.0</a> compat data</li> <li>Added <a href="https://github.com/denoland/deno/releases/tag/v2.6.0">Deno 2.6</a> compat data mapping</li> <li>Added Opera Android <a href="https://forums.opera.com/topic/87267/opera-for-android-93">93</a> and <a href="https://forums.opera.com/topic/87678/opera-for-android-94">94</a> compat data mapping</li> <li>Added Electron 41 compat data mapping</li> <li><code>Iterator.prototype.flatMap</code> marked as supported from Safari 26.2 and Bun 1.2.21 because of a <a href="https://bugs.webkit.org/show_bug.cgi?id=297532">bug</a>: throws on iterator without <code>return</code> method</li> <li><code>Uint8Array.prototype.setFromHex</code> marked as supported from V8 ~ Chromium 144 because of a <a href="https://issues.chromium.org/issues/454630441">bug</a>: throws an error on length-tracking views over ResizableArrayBuffer</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zloirock/core-js/commit/5d657da9e5ab5ac2f1657ba81821ecc50960b3ad"><code>5d657da</code></a> v3.48.0</li> <li><a href="https://github.com/zloirock/core-js/commit/5644e73d977a0fc2e3bc9354aed678a4ce6ee0b1"><code>5644e73</code></a> Add bug detection for <code>Uint8Array.prototype.setFromHex</code></li> <li><a href="https://github.com/zloirock/core-js/commit/804a10e6e54e03c1e426b0788bae1282dface839"><code>804a10e</code></a> Merge pull request <a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/1501">#1501</a> from zloirock/flat-map-fix</li> <li><a href="https://github.com/zloirock/core-js/commit/45d7fe314e97d65eff26ceb9b6ae1849c856bb20"><code>45d7fe3</code></a> Add bug detection to Iterator flatMap method</li> <li><a href="https://github.com/zloirock/core-js/commit/efd9c2f14c2cd4d26a4893a60ab8ef5313de0c26"><code>efd9c2f</code></a> move <code>Map</code> upsert proposal to stable ES</li> <li><a href="https://github.com/zloirock/core-js/commit/dcb938dc68ff4ef957095712be2f3d7cc3985caa"><code>dcb938d</code></a> update the year and normalize the copyright wording</li> <li><a href="https://github.com/zloirock/core-js/commit/5454a5d20f468dd4556441c85cbecd437adb40c3"><code>5454a5d</code></a> add some more workarounds for a Safari < 13 bug with silent ignore of non-wri...</li> <li><a href="https://github.com/zloirock/core-js/commit/73d4b6c4f5c729aad6ff1be7648f8a51a0aed38a"><code>73d4b6c</code></a> add some more <code>createProperty</code> cases</li> <li><a href="https://github.com/zloirock/core-js/commit/9c89290d70612e6ac9f7ebf6215f63dc71965693"><code>9c89290</code></a> fix: spec compliance for Array.prototype.flat and flatMap</li> <li><a href="https://github.com/zloirock/core-js/commit/e3774ce67d77fe3bd5f89aa36488ef5ebbb0ba35"><code>e3774ce</code></a> fix: use createProperty in Array.prototype.filter</li> <li>Additional commits viewable in <a href="https://github.com/zloirock/core-js/commits/v3.48.0/packages/core-js">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=core-js&package-manager=npm_and_yarn&previous-version=3.47.0&new-version=3.48.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>