[Snyk] Upgrade core-js from 3.41.0 to 3.45.1 by revue-de-presse · Pull Request #884 · revuedepresse/org.revue-de-presse

revue-de-presse · 2025-10-06T05:32:31Z

Snyk has created this PR to upgrade core-js from 3.41.0 to 3.45.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 5 versions ahead of your current version.
The recommended version was released 2 months ago.

Release notes

Package name: core-js

3.45.1 - 2025-08-20
- Changes v3.45.0...v3.45.1 (30 commits)
- Fixed a conflict of native methods from Map upsert proposal with polyfilled methods in the pure version
- Added bugs fields to package.json of all packages
- Compat data improvements:
  - Map upsert proposal features marked as shipped from Bun 1.2.20
  - Added Samsung Internet 29 compat data mapping
  - Added Electron 39 compat data mapping
3.45.0 - 2025-08-04
- Changes v3.44.0...v3.45.0 (70 commits)
- Uint8Array to / from base64 and hex proposal:
  - Built-ins:
    - Uint8Array.fromBase64
    - Uint8Array.fromHex
    - Uint8Array.prototype.setFromBase64
    - Uint8Array.prototype.setFromHex
    - Uint8Array.prototype.toBase64
    - Uint8Array.prototype.toHex
  - Moved to stable ES, July 2025 TC39 meeting
  - Added es. namespace modules, /es/ and /stable/ namespaces entries
  - Added detection of a Webkit bug: Uint8Array fromBase64 / setFromBase64 does not throw an error on incorrect length of base64 string
- Math.sumPrecise proposal:
  - Built-ins:
    - Math.sumPrecise
  - Moved to stable ES, July 2025 TC39 meeting
  - Added es. namespace module, /es/ and /stable/ namespaces entries
- Iterator sequencing proposal:
  - Built-ins:
    - Iterator.concat
  - Moved to stage 3, July 2025 TC39 meeting
  - Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
- Map upsert proposal:
  - Built-ins:
    - Map.prototype.getOrInsert
    - Map.prototype.getOrInsertComputed
    - WeakMap.prototype.getOrInsert
    - WeakMap.prototype.getOrInsertComputed
  - Moved to stage 3, July 2025 TC39 meeting
  - Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
- Added missing dependencies to some entries of static Iterator methods
- Fixed Joint Iteration proposal in /stage/ entries
- Compat data improvements:
  - Uint8Array to / from base64 and hex proposal features marked as supported from V8 ~ Chromium 140
  - Uint8Array.{ fromBase64, prototype.setFromBase64 } marked as unsupported in Safari and supported only from Bun 1.2.20 because of a bug: it does not throw an error on incorrect length of base64 string
  - %TypedArray%.prototype.with marked as fixed in Safari 26.0
  - Updated Electron 38 compat data mapping
  - Added Opera Android 91 compat data mapping
3.44.0 - 2025-07-07
- Changes v3.43.0...v3.44.0 (87 commits)
- Uint8Array to / from base64 and hex stage 3 proposal:
  - Fixed several V8 bugs in Uint8Array.fromHex and Uint8Array.prototype.{ setFromBase64, toBase64, toHex }, thanks @ brc-dd
- Joint iteration stage 2.7 proposal:
  - Uses Get in Iterator.zipKeyed, following tc39/proposal-joint-iteration#43
- Iterator sequencing stage 2.7 proposal:
  - Iterator.concat no longer reuses IteratorResult object of concatenated iterators, following tc39/proposal-iterator-sequencing#26
- Iterator chunking stage 2 proposal:
  - Added built-ins:
    - Iterator.prototype.sliding
- Number.prototype.clamp stage 2 proposal:
  - clamp no longer throws an error on NaN as min or max, following tc39/proposal-math-clamp#d2387791c265edf66fbe2455eab919016717ce6f
- Fixed some cases of Set.prototype.{ symmetricDifference, union } detection
- Added missing dependencies to some entries of static Iterator methods
- Added missing /full/{ instance, number/virtual }/clamp entries
- Some minor stylistic changes
- Compat data improvements:
  - Added Electron 38 and 39 compat data mapping
  - Added Oculus Quest Browser 38 and 39 compat data mapping
  - Iterator helpers marked as fixed and updated following the latest spec changes in Safari 26.0
  - Set.prototype.{ difference, symmetricDifference, union } marked as fixed in Safari 26.0
  - SuppressedError marked as fixed in FF141
  - Error.isError marked as fixed in Node 24.3
  - setImmediate and clearImmediate marked as available from Deno 2.4
  - Math.sumPrecise marked as shipped in Bun 1.2.18
  - %TypedArray%.prototype.with marked as fixed in Bun 1.2.18
3.43.0 - 2025-06-09
- Changes v3.42.0...v3.43.0 (139 commits)
- Explicit Resource Management proposals:
  - Built-ins:
    - Symbol.dispose
    - Symbol.asyncDispose
    - SuppressedError
    - DisposableStack
      - DisposableStack.prototype.dispose
      - DisposableStack.prototype.use
      - DisposableStack.prototype.adopt
      - DisposableStack.prototype.defer
      - DisposableStack.prototype.move
      - DisposableStack.prototype[@@ dispose]
    - AsyncDisposableStack
      - AsyncDisposableStack.prototype.disposeAsync
      - AsyncDisposableStack.prototype.use
      - AsyncDisposableStack.prototype.adopt
      - AsyncDisposableStack.prototype.defer
      - AsyncDisposableStack.prototype.move
      - AsyncDisposableStack.prototype[@@ asyncDispose]
    - Iterator.prototype[@@ dispose]
    - AsyncIterator.prototype[@@ asyncDispose]
  - Moved to stable ES, May 2025 TC39 meeting
  - Added es. namespace module, /es/ and /stable/ namespaces entries
- Array.fromAsync proposal:
  - Built-ins:
    - Array.fromAsync
  - Moved to stable ES, May 2025 TC39 meeting
  - Added es. namespace module, /es/ and /stable/ namespaces entries
- Error.isError proposal:
  - Built-ins:
    - Error.isError
  - Moved to stable ES, May 2025 TC39 meeting
  - Added es. namespace module, /es/ and /stable/ namespaces entries
- Added Joint iteration stage 2.7 proposal:
  - Added built-ins:
    - Iterator.zip
    - Iterator.zipKeyed
- Added Iterator chunking stage 2 proposal:
  - Added built-ins:
    - Iterator.prototype.chunks
    - Iterator.prototype.windows
- Number.prototype.clamp proposal:
  - Built-ins:
    - Number.prototype.clamp
  - Moved to stage 2, May 2025 TC39 meeting
  - Math.clamp was replaced with Number.prototype.clamp
  - Removed a RangeError if min <= max or +0 min and -0 max, tc39/proposal-math-clamp/#22
- Always check regular expression flags by flags getter PR. Native methods are not fixed, only own implementation updated for:
  - RegExp.prototype[@@ match]
  - RegExp.prototype[@@ replace]
- Improved handling of RegExp flags in polyfills of some methods in engines without proper support of RegExp.prototype.flags and without polyfill of this getter
- Added feature detection for a WebKit bug that occurs when this is updated while Set.prototype.difference is being executed
- Added feature detection for a WebKit bug that occurs when iterator record of a set-like object isn't called before cloning this in the following methods:
  - Set.prototype.symmetricDifference
  - Set.prototype.union
- Added feature detection for a bug in V8 ~ Chromium < 126. Following methods should throw an error on invalid iterator:
  - Iterator.prototype.drop
  - Iterator.prototype.filter
  - Iterator.prototype.flatMap
  - Iterator.prototype.map
- Added feature detection for a WebKit bug: incorrect exception thrown by Iterator.from when underlying iterator's return method is null
- Added feature detection for a FF bug: incorrect exception thrown by Array.prototype.with when index coercion fails
- Added feature detection for a WebKit bug: TypedArray.prototype.with should truncate negative fractional index to zero, but instead throws an error
- Worked around a bug of many different tools (example) with incorrect transforming and breaking JS syntax on getting a method from a number literal
- Fixed deoptimization of the Promise polyfill in the pure version
- Added some missed dependencies to /iterator/flat-map entries
- Some other minor fixes and improvements
- Compat data improvements:
  - Added Deno 2.3 and Deno 2.3.2 compat data mapping
  - Updated Electron 37 compat data mapping
  - Added Opera Android 90 compat data mapping
  - Error.isError marked not supported in Node because of a bug
  - Set.prototype.difference marked as not supported in Safari and supported only from Bun 1.2.5 because of a bug
  - Set.prototype.{ symmetricDifference, union } marked as not supported in Safari and supported only from Bun 1.2.5 because of a bug
  - Iterator.from marked as not supported in Safari and supported only from Bun 1.2.5 because of a bug
  - Iterators closing on early errors in Iterator helpers marked as implemented from FF141
  - Array.prototype.with marked as supported only from FF140 because it throws an incorrect exception when index coercion fails
  - TypedArray.prototype.with marked as unsupported in Bun and Safari because it should truncate negative fractional index to zero, but instead throws an error
  - DisposableStack and AsyncDisposableStack marked as shipped in FF141 (SuppressedError has a bug)
  - AsyncDisposableStack bugs marked as fixed in Deno 2.3.2
  - SuppressedError bugs (extra arguments support and arity) marked as fixed in Bun 1.2.15
3.42.0 - 2025-04-29
- Changes v3.41.0...v3.42.0 (142 commits)
- Map upsert proposal:
  - Moved to stage 2.7, April 2025 TC39 meeting
  - Validation order of WeakMap.prototype.getOrInsertComputed updated following tc39/proposal-upsert#79
  - Built-ins:
    - Map.prototype.getOrInsert
    - Map.prototype.getOrInsertComputed
    - WeakMap.prototype.getOrInsert
    - WeakMap.prototype.getOrInsertComputed
- Don't call well-known Symbol methods for RegExp on primitive values following tc39/ecma262#3009:
  - For avoid performance regression, temporarily, only in own core-js implementations
  - Built-ins:
    - String.prototype.matchAll
    - String.prototype.match
    - String.prototype.replaceAll
    - String.prototype.replace
    - String.prototype.search
    - String.prototype.split
- Added workaround for the Uint8Array.prototype.setFromBase64 bug in some of Linux builds of WebKit
- Implemented early-error iterator closing following tc39/ecma262#3467, including fix of a WebKit bug, in the following methods:
  - Iterator.prototype.drop
  - Iterator.prototype.every
  - Iterator.prototype.filter
  - Iterator.prototype.find
  - Iterator.prototype.flatMap
  - Iterator.prototype.forEach
  - Iterator.prototype.map
  - Iterator.prototype.reduce
  - Iterator.prototype.some
  - Iterator.prototype.take
- Fixed missing forced replacement of AsyncIterator helpers
- Added closing of sync iterator when async wrapper yields a rejection following tc39/ecma262#2600. Affected methods:
  - Array.fromAsync (due to the lack of async feature detection capability - temporarily, only in own core-js implementation)
  - AsyncIterator.from
  - Iterator.prototype.toAsync
- Added detection for throwing on undefined initial parameter in Iterator.prototype.reduce (see WebKit bug)
- core-js-compat and core-js-builder API:
  - Added 'intersect' support for targets.esmodules (Babel 7 behavior)
  - Fixed handling of targets.esmodules: true (Babel 7 behavior)
- Compat data improvements:
  - Explicit Resource Management features disabled (again) in V8 ~ Chromium 135 and re-added in 136
  - RegExp.escape marked as shipped from V8 ~ Chromium 136
  - Error.isError marked as shipped from FF138
  - Explicit Resource Management features re-enabled in Deno 2.2.10
  - Iterator helpers proposal features marked as supported from Deno 1.38.1 since it seems they were disabled in 1.38.0
  - Iterator.prototype.{ drop, reduce, take } methods marked as fixed in Bun 1.2.11
  - Added NodeJS 24.0 compat data mapping
  - Updated Electron 36 and added Electron 37 compat data mapping
  - Added Opera Android 88 and 89 compat data mapping
  - Added Oculus Quest Browser 37 compat data mapping
3.41.0 - 2025-03-01
- Changes v3.40.0...v3.41.0 (85 commits)
- RegExp.escape proposal:
  - Built-ins:
    - RegExp.escape
  - Moved to stable ES, February 2025 TC39 meeting
  - Added es. namespace module, /es/ and /stable/ namespaces entries
- Float16 proposal:
  - Built-ins:
    - Math.f16round
    - DataView.prototype.getFloat16
    - DataView.prototype.setFloat16
  - Moved to stable ES, February 2025 TC39 meeting
  - Added es. namespace modules, /es/ and /stable/ namespaces entries
- Math.clamp stage 1 proposal:
  - Built-ins:
    - Math.clamp
  - Extracted from old Math extensions proposal, February 2025 TC39 meeting
  - Added arguments validation
  - Added new entries
- Added a workaround of a V8 AsyncDisposableStack bug, tc39/proposal-explicit-resource-management/256
- Compat data improvements:
  - DisposableStack, SuppressedError and Iterator.prototype[@@ dispose] marked as shipped from V8 ~ Chromium 134
  - Error.isError added and marked as shipped from V8 ~ Chromium 134
  - Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from V8 ~ Chromium 135
  - Iterator helpers proposal features marked as shipped from Safari 18.4
  - JSON.parse source text access proposal features marked as shipped from Safari 18.4
  - Math.sumPrecise marked as shipped from FF137
  - Added Deno 2.2 compat data and compat data mapping
    - Explicit Resource Management features are available in V8 ~ Chromium 134, but not in Deno 2.2 based on it
  - Updated Electron 35 and added Electron 36 compat data mapping
  - Updated Opera Android 87 compat data mapping
  - Added Samsung Internet 28 compat data mapping
  - Added Oculus Quest Browser 36 compat data mapping

from core-js GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade core-js from 3.41.0 to 3.45.1. See this package in npm: core-js See this project in Snyk: https://app.snyk.io/org/revue-de-presse-aow/project/026674b7-08c4-47d4-bf8d-6d6fb5bd4e39?utm_source=github&utm_medium=referral&page=upgrade-pr

thierrymarianne force-pushed the main branch 6 times, most recently from 474ba55 to 9feabcc Compare December 4, 2025 22:48

thierrymarianne force-pushed the main branch 2 times, most recently from e995b1c to bb0a45d Compare January 4, 2026 17:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade core-js from 3.41.0 to 3.45.1#884

[Snyk] Upgrade core-js from 3.41.0 to 3.45.1#884
revue-de-presse wants to merge 1 commit intomainfrom
snyk-upgrade-3ef30b5320165751a0a1d890a81b505c

revue-de-presse commented Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

revue-de-presse commented Oct 6, 2025

Snyk has created this PR to upgrade core-js from 3.41.0 to 3.45.1.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants