[Snyk] Upgrade core-js from 3.9.1 to 3.11.0 #92

snyk-bot · 2021-05-14T01:11:12Z

Snyk has created this PR to upgrade core-js from 3.9.1 to 3.11.0.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 4 versions ahead of your current version.
The recommended version was released 22 days ago, on 2021-04-22.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Access Restriction Bypass SNYK-JS-XMLHTTPREQUESTSSL-1255647	544/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3	Proof of Concept
Arbitrary Code Injection SNYK-JS-XMLHTTPREQUESTSSL-1082936	544/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-NETMASK-1089716	544/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: core-js

3.11.0 - 2021-04-22
- Added accessible Object#hasOwnProperty stage 2 proposal
  - Object.hasOwn method
- Fixed a possible RegExp constructor problem with multiple global core-js instances
3.10.2 - 2021-04-19
- URL and URLSearchParams marked as supported from Safari 14.0
- Polyfilled built-in constructors protected from calling on instances
3.10.1 - 2021-04-07
- Prevented possible RegExp#split problems in old engines, #751, #919
- Detection of Safari 10 string padding bug extended to some Safari-based browsers
3.10.0 - 2021-03-31
- Array find from last proposal moved to the stage 2, March TC39 meeting
- Prevented possible RegExp#exec problems in some old engines, #920
- Updated compat data mapping:
  - NodeJS up to 16.0
  - Electron up to 13.0
  - Samsung Internet up to 14.0
  - Opera Android up to 62
  - The rest automatically
3.9.1 - 2021-02-28
- Added a workaround for Chrome 38-40 bug which does not allow to inherit symbols (incl. well-known) from DOM collections prototypes to instances, #37
- Used NumericRangeIterator as toStringTag instead of RangeIterator in { Number, BigInt }.range iterator, per this PR
- TypedArray constructors marked as supported from Safari 14.0
- Updated compat data mapping for iOS Safari and Opera for Android

from core-js GitHub release notes

Commit messages

Package name: core-js

e94a771 3.11.0
d4f51fa Merge pull request #928 from jamiebuilds/patch-1
7ea1f1b review
28afbf1 Update hasOwn to reflect change in operation order
8e1c655 add node 16 to ci
42f0d0f update dependencies
acd0a4a add accessible `Object#hasOwnProperty` stage 2 proposal, `Object.hasOwn` method
8f158cb improve linting
5f34c78 update dependencies
b76f929 fix a possible `RegExp` constructor problem with multiple global `core-js` instances
8710503 3.10.2
ee0e2b8 update dependencies
0ef4be7 mark `URL` and `URLSearchParams` as supported from Safari 14.0
b5dbc24 fix `Symbol` detection in compat tests
7fb2b1d change a term for consistency
8355c43 protect polyfilled built-in constructors from calling on instances
25d67d1 update dependencies
ce52fdc update dependencies, improve linting
381a25c fix incorrect blob urls origin
3922729 update dependencies
1f7de10 update dependencies
8e7a34a update `Intl` note, https://github.com/Intl support zloirock/core-js#839#issuecomment-648584917
ea13590 update dependencies
20183a5 update dependencies