Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade core-js from 3.23.3 to 3.23.4 #51

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade core-js from 3.23.3 to 3.23.4.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2022-07-09.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TERSER-2806366
336/1000
Why? Recently disclosed, CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TERSER-2806366
336/1000
Why? Recently disclosed, CVSS 5.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: core-js
  • 3.23.4 - 2022-07-09
    • Added a workaround of the Bun ~ 0.1.1 bug that define some globals with incorrect property descriptors and that causes a crash of core-js
    • Added a fix of the FF103+ structuredClone bugs (1774866 (fixed in FF104) and 1777321 (still not fixed)) that now can clone errors, but .stack of the clone is an empty string
    • Fixed { Map, WeakMap }.prototype.emplace logic, #1102
    • Fixed order of errors throwing on iterator helpers
  • 3.23.3 - 2022-06-25
from core-js GitHub release notes
Commit messages
Package name: core-js
  • fe00e9c 3.23.4
  • 369786c minor refactoring
  • 0b5d53d fix `.emplace` logic, #1102
  • 0134fd1 improve a note
  • e245f94 clarify links to FF bugs
  • 87bf578 add a little more info
  • 0342bfa update a comment
  • e41db12 add a fix for the FF103 `structuredClone` bug that now can clone errors, but `.stack` of the clone is an empty string
  • cb8d8e0 add a workaround for Bun ~ 0.1.1 bug that define some globals with incorrect property descriptors
  • aeb28b6 use `getIteratorDirect` for proper order of error throwing on iterator helpers
  • cd4c263 some stylistic changes
  • bc63ebd replace deprecated `avoid-escape` via `avoidEscape`
  • 595227c update dependencies
  • 5d42952 Merge pull request #1100 from dev-itsheng/patch-2
  • f2e6605 fix(*): change all backticks to `'`
  • f6582da fix(*): Typo
  • f8e29e6 update dependencies
  • f33766c some stylistic changes
  • ac364f5 change the param of the `usage` script
  • 7510ecd update dependencies
  • 7bbe874 update dependencies
  • 569ee6c update dependencies
  • 08d8143 bump version in `SECURITY.md`
  • 11e024a update dependencies

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@netlify
Copy link

netlify bot commented Jul 31, 2022

Deploy Preview for dnidomaturypl ready!

Name Link
🔨 Latest commit 9ff432f
🔍 Latest deploy log https://app.netlify.com/sites/dnidomaturypl/deploys/62e5ec7dc490da0009b5101f
😎 Deploy Preview https://deploy-preview-51--dnidomaturypl.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant