fix(deps): update dependency core-js to v3.47.0 (#788)

renovate[bot] · Tobbe · Tobbe · commit 8aec668123ec · 2025-12-26T14:42:02.000+01:00
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [core-js](https://core-js.io) ([source](https://redirect.github.com/zloirock/core-js/tree/HEAD/packages/core-js)) | [`3.42.0` -> `3.47.0`](https://renovatebot.com/diffs/npm/core-js/3.42.0/3.47.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/core-js/3.47.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/core-js/3.42.0/3.47.0?slim=true) | --- <details> <summary>zloirock/core-js (core-js)</summary> [`v3.47.0`](https://redirect.github.com/zloirock/core-js/blob/HEAD/CHANGELOG.md#3470---20251118) [Compare Source](https://redirect.github.com/zloirock/core-js/compare/v3.46.0...v3.47.0) - Changes [v3.46.0...v3.47.0](https://redirect.github.com/zloirock/core-js/compare/v3.46.0...v3.47.0) (117 commits) - [`JSON.parse` source text access proposal](https://redirect.github.com/tc39/proposal-json-parse-with-source) : - Built-ins: - `JSON.isRawJSON` - `JSON.parse` - `JSON.rawJSON` - `JSON.stringify` - Moved to stable ES, [November 2025 TC39 meeting](https://x.com/robpalmer2/status/1990603365236289653) - Added `es.` namespace modules, `/es/` and `/stable/` namespaces entries - Reworked `JSON.stringify` internals - [`Iterator` sequencing proposal](https://redirect.github.com/tc39/proposal-iterator-sequencing): - Built-ins: - `Iterator.concat` - Moved to stable ES, [November 2025 TC39 meeting](https://redirect.github.com/tc39/proposals/commit/33be3cb6d6743c7cc8628c547423f49078c0b655) - Added `es.` namespace modules, `/es/` and `/stable/` namespaces entries - [Joint iteration proposal](https://redirect.github.com/tc39/proposal-joint-iteration): - Built-ins: - `Iterator.zip` - `Iterator.zipKeyed` - Moved to stage 3, [November 2025 TC39 meeting](https://redirect.github.com/tc39/proposals/commit/6c0126b8f44323254c93045ee7ec216e49b83ddd) - Added `/actual/` namespace entries, unconditional forced replacement changed to feature detection - Fixed increasing `.size` in `URLSearchParams.prototype.append` polyfill in IE8- - Compat data improvements: - [`Iterator.concat`](https://redirect.github.com/tc39/proposal-iterator-sequencing) marked as [shipped in FF147](https://bugzilla.mozilla.org/show_bug.cgi?id=1986672#c4) - [`Map` upsert proposal](https://redirect.github.com/tc39/proposal-upsert) features marked as shipped in Safari 26.2 - `Math.sumPrecise` marked as shipped in Safari 26.2 - `Uint8Array.{ fromBase64, prototype.setFromBase64 }` marked as fixed in Safari 26.2 - Missed [Explicit Resource Management](https://redirect.github.com/tc39/proposal-explicit-resource-management) features [added in Bun 1.3.0](https://bun.com/blog/bun-v1.3#disposablestack-and-asyncdisposablestack) - Added Oculus Quest Browser 41 compat data mapping - Added Electron 40 compat data mapping [`v3.46.0`](https://redirect.github.com/zloirock/core-js/blob/HEAD/CHANGELOG.md#3460---20251009) [Compare Source](https://redirect.github.com/zloirock/core-js/compare/v3.45.1...v3.46.0) - Changes [v3.45.1...v3.46.0](https://redirect.github.com/zloirock/core-js/compare/v3.45.1...v3.46.0) (116 commits) - [`Map` upsert stage 3 proposal](https://redirect.github.com/tc39/proposal-upsert): - Fixed [a FF `WeakMap.prototype.getOrInsertComputed` bug with callback calling before validation a key](https://bugzilla.mozilla.org/show_bug.cgi?id=1988369) - [`Iterator` chunking proposal](https://redirect.github.com/tc39/proposal-iterator-chunking): - Built-ins: - `Iterator.prototype.chunks` - `Iterator.prototype.windows` - Moved to stage 2.7, [September 2025 TC39 meeting](https://redirect.github.com/tc39/proposals/commit/08e583103c6c244c05a26d9fee518ef8145ba2f6) - `Iterator.prototype.sliding` method replaced with an extra parameter of `Iterator.prototype.windows` method, [tc39/proposal-iterator-chunking/#&#8203;24](https://redirect.github.com/tc39/proposal-iterator-chunking/pull/24), [tc39/proposal-iterator-chunking/#&#8203;26](https://redirect.github.com/tc39/proposal-iterator-chunking/pull/26) - Fixed [`Iterator.zip` and `Iterator.zipKeyed`](https://redirect.github.com/tc39/proposal-joint-iteration) behavior with `mode: 'longest'` option, [#&#8203;1469](https://redirect.github.com/zloirock/core-js/issues/1469), thanks [**@&#8203;lionel-rowe**](https://redirect.github.com/lionel-rowe) - Fixed work of `Object.groupBy` and [`Iterator.zipKeyed`](https://redirect.github.com/tc39/proposal-joint-iteration) together with `Symbol` polyfill - some cases of symbol keys on result `null`-prototype object were able to leak out to `for-in` - Compat data improvements: - [`Map` upsert proposal](https://redirect.github.com/tc39/proposal-upsert) features marked as shipped from FF144 - Added [Node 25.0](https://redirect.github.com/nodejs/node/pull/59896) compat data mapping - Added [Deno 2.5](https://redirect.github.com/denoland/deno/releases/tag/v2.5.0) compat data mapping - Updated Electron 39 compat data mapping - Updated Opera 121+ compat data mapping - Added [Opera Android 92](https://forums.opera.com/topic/86530/opera-for-android-92) compat data mapping - Added Oculus Quest Browser 40 compat data mapping [`v3.45.1`](https://redirect.github.com/zloirock/core-js/blob/HEAD/CHANGELOG.md#3451---20250820) [Compare Source](https://redirect.github.com/zloirock/core-js/compare/v3.45.0...v3.45.1) - Changes [v3.45.0...v3.45.1](https://redirect.github.com/zloirock/core-js/compare/v3.45.0...v3.45.1) (30 commits) - Fixed a conflict of native methods from [`Map` upsert proposal](https://redirect.github.com/tc39/proposal-upsert) with polyfilled methods in the pure version - Added `bugs` fields to `package.json` of all packages - Compat data improvements: - [`Map` upsert proposal](https://redirect.github.com/tc39/proposal-upsert) features marked as shipped from Bun 1.2.20 - Added Samsung Internet 29 compat data mapping - Added Electron 39 compat data mapping [`v3.45.0`](https://redirect.github.com/zloirock/core-js/blob/HEAD/CHANGELOG.md#3450---20250804) [Compare Source](https://redirect.github.com/zloirock/core-js/compare/v3.44.0...v3.45.0) - Changes [v3.44.0...v3.45.0](https://redirect.github.com/zloirock/core-js/compare/v3.44.0...v3.45.0) (70 commits) - [`Uint8Array` to / from base64 and hex proposal](https://redirect.github.com/tc39/proposal-arraybuffer-base64): - Built-ins: - `Uint8Array.fromBase64` - `Uint8Array.fromHex` - `Uint8Array.prototype.setFromBase64` - `Uint8Array.prototype.setFromHex` - `Uint8Array.prototype.toBase64` - `Uint8Array.prototype.toHex` - Moved to stable ES, [July 2025 TC39 meeting](https://redirect.github.com/tc39/proposals/commit/d41fe182cdb90da3076ab711aae3944ed86bcf18) - Added `es.` namespace modules, `/es/` and `/stable/` namespaces entries - Added detection of a Webkit bug: `Uint8Array` fromBase64 / setFromBase64 does not throw an error on incorrect length of base64 string - [`Math.sumPrecise` proposal](https://redirect.github.com/tc39/proposal-math-sum): - Built-ins: - `Math.sumPrecise` - Moved to stable ES, [July 2025 TC39 meeting](https://redirect.github.com/tc39/proposals/commit/2616413ace9074bfd444adee9501fae4c8d66fcb) - Added `es.` namespace module, `/es/` and `/stable/` namespaces entries - [`Iterator` sequencing proposal](https://redirect.github.com/tc39/proposal-iterator-sequencing): - Built-ins: - `Iterator.concat` - Moved to stage 3, [July 2025 TC39 meeting](https://redirect.github.com/tc39/proposals/commit/3eebab0f8594673dd08bc709d68c011016074c2e) - Added `/actual/` namespace entries, unconditional forced replacement changed to feature detection - [`Map` upsert proposal](https://redirect.github.com/tc39/proposal-upsert): - Built-ins: - `Map.prototype.getOrInsert` - `Map.prototype.getOrInsertComputed` - `WeakMap.prototype.getOrInsert` - `WeakMap.prototype.getOrInsertComputed` - Moved to stage 3, [July 2025 TC39 meeting](https://redirect.github.com/tc39/proposals/commit/a9c0dfa4e00ffb69aa4df91d8c0c26b064d67108) - Added `/actual/` namespace entries, unconditional forced replacement changed to feature detection - Added missing dependencies to some entries of static `Iterator` methods - Fixed [Joint Iteration proposal](https://redirect.github.com/tc39/proposal-joint-iteration) in `/stage/` entries - Compat data improvements: - [`Uint8Array` to / from base64 and hex proposal](https://redirect.github.com/tc39/proposal-arraybuffer-base64) features marked as [supported from V8 \~ Chromium 140](https://issues.chromium.org/issues/42204568#comment37) - [`Uint8Array.{ fromBase64, prototype.setFromBase64 }`](https://redirect.github.com/tc39/proposal-arraybuffer-base64) marked as unsupported in Safari and supported only from Bun 1.2.20 because of a bug: it does not throw an error on incorrect length of base64 string - `%TypedArray%.prototype.with` marked as fixed in Safari 26.0 - Updated Electron 38 compat data mapping - Added [Opera Android 91](https://forums.opera.com/topic/86005/opera-for-android-91) compat data mapping [`v3.44.0`](https://redirect.github.com/zloirock/core-js/blob/HEAD/CHANGELOG.md#3440---20250707) [Compare Source](https://redirect.github.com/zloirock/core-js/compare/v3.43.0...v3.44.0) - Changes [v3.43.0...v3.44.0](https://redirect.github.com/zloirock/core-js/compare/v3.43.0...v3.44.0) (87 commits) - [`Uint8Array` to / from base64 and hex stage 3 proposal](https://redirect.github.com/tc39/proposal-arraybuffer-base64): - Fixed [several V8 bugs](https://redirect.github.com/zloirock/core-js/issues/1439) in `Uint8Array.fromHex` and `Uint8Array.prototype.{ setFromBase64, toBase64, toHex }`, thanks [**@&#8203;brc-dd**](https://redirect.github.com/brc-dd) - [Joint iteration stage 2.7 proposal](https://redirect.github.com/tc39/proposal-joint-iteration): - Uses `Get` in `Iterator.zipKeyed`, following [tc39/proposal-joint-iteration#43](https://redirect.github.com/tc39/proposal-joint-iteration/pull/43) - [`Iterator` sequencing stage 2.7 proposal](https://redirect.github.com/tc39/proposal-iterator-sequencing): - `Iterator.concat` no longer reuses `IteratorResult` object of concatenated iterators, following [tc39/proposal-iterator-sequencing#26](https://redirect.github.com/tc39/proposal-iterator-sequencing/pull/26) - [`Iterator` chunking stage 2 proposal](https://redirect.github.com/tc39/proposal-iterator-chunking): - Added built-ins: - `Iterator.prototype.sliding` - [`Number.prototype.clamp` stage 2 proposal](https://redirect.github.com/tc39/proposal-math-clamp): - `clamp` no longer throws an error on `NaN` as `min` or `max`, following [tc39/proposal-math-clamp#d2387791c265edf66fbe2455eab919016717ce6f](https://redirect.github.com/tc39/proposal-math-clamp/commit/d2387791c265edf66fbe2455eab919016717ce6f) - Fixed some cases of `Set.prototype.{ symmetricDifference, union }` detection - Added missing dependencies to some entries of static `Iterator` methods - Added missing `/full/{ instance, number/virtual }/clamp` entries - Some minor stylistic changes - Compat data improvements: - Added Electron 38 and 39 compat data mapping - Added Oculus Quest Browser 38 and 39 compat data mapping - `Iterator` helpers marked as fixed and updated following the latest spec changes in Safari 26.0 - `Set.prototype.{ difference, symmetricDifference, union }` marked as fixed in Safari 26.0 - `SuppressedError` marked [as fixed](https://bugzilla.mozilla.org/show_bug.cgi?id=1971000) in FF141 - `Error.isError` marked [as fixed](https://redirect.github.com/nodejs/node/pull/58691) in Node 24.3 - `setImmediate` and `clearImmediate` marked as available [from Deno 2.4](https://redirect.github.com/denoland/deno/pull/29877) - `Math.sumPrecise` marked as [shipped in Bun 1.2.18](https://redirect.github.com/oven-sh/bun/pull/20569) - `%TypedArray%.prototype.with` marked as fixed in Bun 1.2.18 [`v3.43.0`](https://redirect.github.com/zloirock/core-js/blob/HEAD/CHANGELOG.md#3430---20250609) [Compare Source](https://redirect.github.com/zloirock/core-js/compare/v3.42.0...v3.43.0) - Changes [v3.42.0...v3.43.0](https://redirect.github.com/zloirock/core-js/compare/v3.42.0...v3.43.0) (139 commits) - [Explicit Resource Management proposals](https://redirect.github.com/tc39/proposal-explicit-resource-management): - Built-ins: - `Symbol.dispose` - `Symbol.asyncDispose` - `SuppressedError` - `DisposableStack` - `DisposableStack.prototype.dispose` - `DisposableStack.prototype.use` - `DisposableStack.prototype.adopt` - `DisposableStack.prototype.defer` - `DisposableStack.prototype.move` - `DisposableStack.prototype[@&#8203;@&#8203;dispose]` - `AsyncDisposableStack` - `AsyncDisposableStack.prototype.disposeAsync` - `AsyncDisposableStack.prototype.use` - `AsyncDisposableStack.prototype.adopt` - `AsyncDisposableStack.prototype.defer` - `AsyncDisposableStack.prototype.move` - `AsyncDisposableStack.prototype[@&#8203;@&#8203;asyncDispose]` - `Iterator.prototype[@&#8203;@&#8203;dispose]` - `AsyncIterator.prototype[@&#8203;@&#8203;asyncDispose]` - Moved to stable ES, [May 2025 TC39 meeting](https://x.com/robpalmer2/status/1927744934343213085) - Added `es.` namespace module, `/es/` and `/stable/` namespaces entries - [`Array.fromAsync` proposal](https://redirect.github.com/tc39/proposal-array-from-async): - Built-ins: - `Array.fromAsync` - Moved to stable ES, [May 2025 TC39 meeting](https://redirect.github.com/tc39/proposal-array-from-async/issues/14#issuecomment-2916645435) - Added `es.` namespace module, `/es/` and `/stable/` namespaces entries - [`Error.isError` proposal](https://redirect.github.com/tc39/proposal-is-error): - Built-ins: - `Error.isError` - Moved to stable ES, [May 2025 TC39 meeting](https://redirect.github.com/tc39/proposals/commit/a5d4bb99d79f328533d0c36b0cd20597fa12c7a8) - Added `es.` namespace module, `/es/` and `/stable/` namespaces entries - Added [Joint iteration stage 2.7 proposal](https://redirect.github.com/tc39/proposal-joint-iteration): - Added built-ins: - `Iterator.zip` - `Iterator.zipKeyed` - Added [`Iterator` chunking stage 2 proposal](https://redirect.github.com/tc39/proposal-iterator-chunking): - Added built-ins: - `Iterator.prototype.chunks` - `Iterator.prototype.windows` - [`Number.prototype.clamp` proposal](https://redirect.github.com/tc39/proposal-math-clamp): - Built-ins: - `Number.prototype.clamp` - Moved to stage 2, [May 2025 TC39 meeting](https://redirect.github.com/tc39/proposal-math-clamp/commit/a005f28a6a03e175b9671de1c8c70dd5b7b08c2d) - `Math.clamp` was replaced with `Number.prototype.clamp` - Removed a `RangeError` if `min <= max` or `+0` min and `-0` max, [tc39/proposal-math-clamp/#&#8203;22](https://redirect.github.com/tc39/proposal-math-clamp/issues/22) - Always check regular expression flags by `flags` getter [PR](https://redirect.github.com/tc39/ecma262/pull/2791). Native methods are not fixed, only own implementation updated for: - `RegExp.prototype[@&#8203;@&#8203;match]` - `RegExp.prototype[@&#8203;@&#8203;replace]` - Improved handling of `RegExp` flags in polyfills of some methods in engines without proper support of `RegExp.prototype.flags` and without polyfill of this getter - Added feature detection for [a WebKit bug](https://bugs.webkit.org/show_bug.cgi?id=288595) that occurs when `this` is updated while `Set.prototype.difference` is being executed - Added feature detection for [a WebKit bug](https://bugs.webkit.org/show_bug.cgi?id=289430) that occurs when iterator record of a set-like object isn't called before cloning `this` in the following methods: - `Set.prototype.symmetricDifference` - `Set.prototype.union` - Added feature detection for [a bug](https://issues.chromium.org/issues/336839115) in V8 \~ Chromium < 126. Following methods should throw an error on invalid iterator: - `Iterator.prototype.drop` - `Iterator.prototype.filter` - `Iterator.prototype.flatMap` - `Iterator.prototype.map` - Added feature detection for [a WebKit bug](https://bugs.webkit.org/show_bug.cgi?id=288714): incorrect exception thrown by `Iterator.from` when underlying iterator's `return` method is `null` - Added feature detection for a FF bug: incorrect exception thrown by `Array.prototype.with` when index coercion fails - Added feature detection for a WebKit bug: `TypedArray.prototype.with` should truncate negative fractional index to zero, but instead throws an error - Worked around a bug of many different tools ([example](https://redirect.github.com/zloirock/core-js/pull/1368#issuecomment-2908034690)) with incorrect transforming and breaking JS syntax on getting a method from a number literal - Fixed deoptimization of the `Promise` polyfill in the pure version - Added some missed dependencies to `/iterator/flat-map` entries - Some other minor fixes and improvements - Compat data improvements: - Added [Deno 2.3](https://redirect.github.com/denoland/deno/releases/tag/v2.3.0) and [Deno 2.3.2](https://redirect.github.com/denoland/deno/releases/tag/v2.3.2) compat data mapping - Updated Electron 37 compat data mapping - Added Opera Android 90 compat data mapping - [`Error.isError`](https://redirect.github.com/tc39/proposal-is-error) marked not supported in Node because of [a bug](https://redirect.github.com/nodejs/node/issues/56497) - `Set.prototype.difference` marked as not supported in Safari and supported only from Bun 1.2.5 because of [a bug](https://bugs.webkit.org/show_bug.cgi?id=288595) - `Set.prototype.{ symmetricDifference, union }` marked as not supported in Safari and supported only from Bun 1.2.5 because of [a bug](https://bugs.webkit.org/show_bug.cgi?id=289430) - `Iterator.from` marked as not supported in Safari and supported only from Bun 1.2.5 because of [a bug](https://bugs.webkit.org/show_bug.cgi?id=288714) - Iterators closing on early errors in `Iterator` helpers marked as implemented from FF141 - `Array.prototype.with` marked as supported only from FF140 because it throws an incorrect exception when index coercion fails - `TypedArray.prototype.with` marked as unsupported in Bun and Safari because it should truncate negative fractional index to zero, but instead throws an error - `DisposableStack` and `AsyncDisposableStack` marked as [shipped in FF141](https://bugzilla.mozilla.org/show_bug.cgi?id=1967744) (`SuppressedError` has [a bug](https://bugzilla.mozilla.org/show_bug.cgi?id=1971000)) - `AsyncDisposableStack` bugs marked as fixed in Deno 2.3.2 - `SuppressedError` bugs ([extra arguments support](https://redirect.github.com/oven-sh/bun/issues/9283) and [arity](https://redirect.github.com/oven-sh/bun/issues/9282)) marked as fixed in Bun 1.2.15 </details> --- 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cedarjs/cedar).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Tobbe Lundberg <tobbe@tlundberg.com>
diff --git a/package.json b/package.json
@@ -101,7 +101,7 @@
     "babel-plugin-remove-code": "0.0.6",
     "boxen": "5.1.2",
     "concurrently": "8.2.2",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "cross-env": "7.0.3",
     "cypress": "13.17.0",
     "cypress-fail-fast": "7.1.1",
diff --git a/packages/auth-providers/dbAuth/setup/package.json b/packages/auth-providers/dbAuth/setup/package.json
@@ -28,7 +28,7 @@
     "@cedarjs/cli-helpers": "2.1.1",
     "@prisma/internals": "6.19.1",
     "@simplewebauthn/browser": "9.0.1",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "prompts": "2.4.2",
     "termi-link": "1.1.0"
   },
diff --git a/packages/auth/package.json b/packages/auth/package.json
@@ -87,7 +87,7 @@
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "react": "18.3.1"
   },
   "devDependencies": {
diff --git a/packages/babel-config/dist.test.ts b/packages/babel-config/dist.test.ts
@@ -15,7 +15,7 @@ describe('dist', () => {
           },
           "version": "7.28.4",
         },
-        "CORE_JS_VERSION": "3.42",
+        "CORE_JS_VERSION": "3.47",
         "RUNTIME_CORE_JS_VERSION": "7.28.4",
         "TARGETS_NODE": "20.10",
         "getApiSideBabelConfigPath": [Function],
diff --git a/packages/babel-config/package.json b/packages/babel-config/package.json
@@ -39,7 +39,7 @@
     "babel-plugin-auto-import": "1.1.0",
     "babel-plugin-graphql-tag": "3.3.0",
     "babel-plugin-module-resolver": "5.0.2",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "fast-glob": "3.3.3",
     "graphql": "16.12.0",
     "typescript": "5.9.3"
diff --git a/packages/babel-config/src/__tests__/api.test.ts b/packages/babel-config/src/__tests__/api.test.ts
@@ -59,7 +59,7 @@ describe('api', () => {
             {
               "corejs": {
                 "proposals": true,
-                "version": "3.42",
+                "version": "3.47",
               },
               "exclude": [
                 "@babel/plugin-transform-class-properties",
diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -56,7 +56,7 @@
     "ci-info": "4.3.1",
     "concurrently": "8.2.2",
     "configstore": "7.1.0",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "cross-env": "7.0.3",
     "decamelize": "6.0.1",
     "dotenv-defaults": "5.0.2",
diff --git a/packages/codemods/package.json b/packages/codemods/package.json
@@ -36,7 +36,7 @@
     "@vscode/ripgrep": "1.17.0",
     "@whatwg-node/fetch": "0.10.13",
     "cheerio": "1.1.2",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "deepmerge": "4.3.1",
     "execa": "5.1.1",
     "fast-glob": "3.3.3",
diff --git a/packages/graphql-server/package.json b/packages/graphql-server/package.json
@@ -51,7 +51,7 @@
     "@graphql-tools/utils": "10.5.4",
     "@graphql-yoga/plugin-persisted-operations": "3.17.1",
     "@opentelemetry/api": "1.8.0",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "graphql": "16.12.0",
     "graphql-scalars": "1.25.0",
     "graphql-tag": "2.12.6",
diff --git a/packages/internal/package.json b/packages/internal/package.json
@@ -158,7 +158,7 @@
     "@graphql-tools/documents": "1.0.1",
     "@sdl-codegen/node": "2.0.1",
     "ansis": "4.2.0",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "deepmerge": "4.3.1",
     "esbuild": "0.27.2",
     "fast-glob": "3.3.3",
diff --git a/packages/router/package.json b/packages/router/package.json
@@ -97,7 +97,7 @@
     "@babel/runtime-corejs3": "7.28.4",
     "@cedarjs/auth": "2.1.1",
     "@cedarjs/server-store": "2.1.1",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "react": "18.3.1",
     "react-dom": "18.3.1"
   },
diff --git a/packages/structure/package.json b/packages/structure/package.json
@@ -30,7 +30,7 @@
     "@prisma/internals": "6.19.1",
     "@types/line-column": "1.0.2",
     "camelcase": "6.3.0",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "deepmerge": "4.3.1",
     "dotenv-defaults": "5.0.2",
     "enquirer": "2.4.1",
diff --git a/packages/vite/package.json b/packages/vite/package.json
@@ -80,7 +80,7 @@
     "buffer": "6.0.3",
     "busboy": "^1.6.0",
     "cookie": "1.1.1",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "dotenv-defaults": "5.0.2",
     "execa": "5.1.1",
     "express": "4.22.1",
diff --git a/packages/web/package.json b/packages/web/package.json
@@ -151,7 +151,7 @@
     "@whatwg-node/fetch": "0.10.13",
     "apollo-upload-client": "18.0.1",
     "cookie": "1.1.1",
-    "core-js": "3.42.0",
+    "core-js": "3.47.0",
     "graphql": "16.12.0",
     "graphql-sse": "2.6.0",
     "graphql-tag": "2.12.6",
diff --git a/yarn.lock b/yarn.lock
@@ -2945,7 +2945,7 @@ __metadata:
     "@simplewebauthn/browser": "npm:9.0.1"
     "@simplewebauthn/types": "npm:9.0.1"
     "@types/yargs": "npm:17.0.35"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     prompts: "npm:2.4.2"
     termi-link: "npm:1.1.0"
     ts-dedent: "npm:2.2.0"
@@ -3219,7 +3219,7 @@ __metadata:
     "@testing-library/jest-dom": "npm:6.5.0"
     "@testing-library/react": "npm:14.3.1"
     concurrently: "npm:8.2.2"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     msw: "npm:1.3.5"
     publint: "npm:0.3.16"
     react: "npm:18.3.1"
@@ -3257,7 +3257,7 @@ __metadata:
     babel-plugin-graphql-tag: "npm:3.3.0"
     babel-plugin-module-resolver: "npm:5.0.2"
     babel-plugin-tester: "npm:11.0.4"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     fast-glob: "npm:3.3.3"
     graphql: "npm:16.12.0"
     tsx: "npm:4.21.0"
@@ -3383,7 +3383,7 @@ __metadata:
     ci-info: "npm:4.3.1"
     concurrently: "npm:8.2.2"
     configstore: "npm:7.1.0"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     cross-env: "npm:7.0.3"
     decamelize: "npm:6.0.1"
     dotenv-defaults: "npm:5.0.2"
@@ -3448,7 +3448,7 @@ __metadata:
     "@vscode/ripgrep": "npm:1.17.0"
     "@whatwg-node/fetch": "npm:0.10.13"
     cheerio: "npm:1.1.2"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     deepmerge: "npm:4.3.1"
     execa: "npm:5.1.1"
     fast-glob: "npm:3.3.3"
@@ -3689,7 +3689,7 @@ __metadata:
     "@whatwg-node/fetch": "npm:0.10.13"
     "@whatwg-node/promise-helpers": "npm:^1.3.0"
     concurrently: "npm:8.2.2"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     graphql: "npm:16.12.0"
     graphql-scalars: "npm:1.25.0"
     graphql-tag: "npm:2.12.6"
@@ -3736,7 +3736,7 @@ __metadata:
     "@types/fs-extra": "npm:11.0.4"
     ansis: "npm:4.2.0"
     concurrently: "npm:8.2.2"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     deepmerge: "npm:4.3.1"
     esbuild: "npm:0.27.2"
     fast-glob: "npm:3.3.3"
@@ -4019,7 +4019,7 @@ __metadata:
     "@types/react": "npm:^18.2.55"
     "@types/react-dom": "npm:^18.2.19"
     concurrently: "npm:8.2.2"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     publint: "npm:0.3.16"
     react: "npm:18.3.1"
     react-dom: "npm:18.3.1"
@@ -4085,7 +4085,7 @@ __metadata:
     "@types/node": "npm:24.10.4"
     "@types/vscode": "npm:1.107.0"
     camelcase: "npm:6.3.0"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     deepmerge: "npm:4.3.1"
     dotenv-defaults: "npm:5.0.2"
     enquirer: "npm:2.4.1"
@@ -4220,7 +4220,7 @@ __metadata:
     busboy: "npm:^1.6.0"
     concurrently: "npm:8.2.2"
     cookie: "npm:1.1.1"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     dotenv-defaults: "npm:5.0.2"
     execa: "npm:5.1.1"
     express: "npm:4.22.1"
@@ -4298,7 +4298,7 @@ __metadata:
     apollo-upload-client: "npm:18.0.1"
     concurrently: "npm:8.2.2"
     cookie: "npm:1.1.1"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     graphql: "npm:16.12.0"
     graphql-sse: "npm:2.6.0"
     graphql-tag: "npm:2.12.6"
@@ -15514,14 +15514,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"core-js@npm:3.42.0":
-  version: 3.42.0
-  resolution: "core-js@npm:3.42.0"
-  checksum: 10c0/2913d3d5452d54ad92f058d66046782d608c05e037bcc523aab79c04454fe640998f94e6011292969d66dfa472f398b085ce843dcb362056532a5799c627184e
-  languageName: node
-  linkType: hard
-
-"core-js@npm:^3.27.2, core-js@npm:^3.30.2":
+"core-js@npm:3.47.0, core-js@npm:^3.27.2, core-js@npm:^3.30.2":
   version: 3.47.0
   resolution: "core-js@npm:3.47.0"
   checksum: 10c0/9b1a7088b7c660c7b8f1d4c90bb1816a8d5352ebdcb7bc742e3a0e4eb803316b5aa17bacb8769522342196351a5430178f46914644f2bfdb94ce0ced3c7fd523
@@ -27924,7 +27917,7 @@ __metadata:
     babel-plugin-remove-code: "npm:0.0.6"
     boxen: "npm:5.1.2"
     concurrently: "npm:8.2.2"
-    core-js: "npm:3.42.0"
+    core-js: "npm:3.47.0"
     cross-env: "npm:7.0.3"
     cypress: "npm:13.17.0"
     cypress-fail-fast: "npm:7.1.1"

Original file line number	Diff line number	Diff line change
`@@ -59,7 +59,7 @@ describe('api', () => {`
`59`	`59`	`{`
`60`	`60`	`"corejs": {`
`61`	`61`	`"proposals": true,`
`62`		`- "version": "3.42",`
	`62`	`+ "version": "3.47",`
`63`	`63`	`},`
`64`	`64`	`"exclude": [`
`65`	`65`	`"@babel/plugin-transform-class-properties",`