[Snyk] Upgrade core-js from 3.43.0 to 3.45.1

[amadib]

Snyk has created this PR to upgrade core-js from 3.43.0 to 3.45.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.

• The recommended version was released 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Function Call With Incorrect Argument Type SNYK-JS-SHAJS-12089400	562	Proof of Concept

Release notes

Package name: core-js

• 3.45.1 - 2025-08-20
  
  • Changes v3.45.0...v3.45.1 (30 commits)
  • Fixed a conflict of native methods from Map upsert proposal with polyfilled methods in the pure version
  • Added bugs fields to package.json of all packages
  • Compat data improvements:
    • Map upsert proposal features marked as shipped from Bun 1.2.20
    • Added Samsung Internet 29 compat data mapping
    • Added Electron 39 compat data mapping
• 3.45.0 - 2025-08-04
  
  • Changes v3.44.0...v3.45.0 (70 commits)
  • Uint8Array to / from base64 and hex proposal:
    • Built-ins:
      • Uint8Array.fromBase64
      • Uint8Array.fromHex
      • Uint8Array.prototype.setFromBase64
      • Uint8Array.prototype.setFromHex
      • Uint8Array.prototype.toBase64
      • Uint8Array.prototype.toHex
    • Moved to stable ES, July 2025 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespaces entries
    • Added detection of a Webkit bug: Uint8Array fromBase64 / setFromBase64 does not throw an error on incorrect length of base64 string
  • Math.sumPrecise proposal:
    • Built-ins:
      • Math.sumPrecise
    • Moved to stable ES, July 2025 TC39 meeting
    • Added es. namespace module, /es/ and /stable/ namespaces entries
  • Iterator sequencing proposal:
    • Built-ins:
      • Iterator.concat
    • Moved to stage 3, July 2025 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Map upsert proposal:
    • Built-ins:
      • Map.prototype.getOrInsert
      • Map.prototype.getOrInsertComputed
      • WeakMap.prototype.getOrInsert
      • WeakMap.prototype.getOrInsertComputed
    • Moved to stage 3, July 2025 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Added missing dependencies to some entries of static Iterator methods
  • Fixed Joint Iteration proposal in /stage/ entries
  • Compat data improvements:
    • Uint8Array to / from base64 and hex proposal features marked as supported from V8 ~ Chromium 140
    • Uint8Array.{ fromBase64, prototype.setFromBase64 } marked as unsupported in Safari and supported only from Bun 1.2.20 because of a bug: it does not throw an error on incorrect length of base64 string
    • %TypedArray%.prototype.with marked as fixed in Safari 26.0
    • Updated Electron 38 compat data mapping
    • Added Opera Android 91 compat data mapping
• 3.44.0 - 2025-07-07
  
  • Changes v3.43.0...v3.44.0 (87 commits)
  • Uint8Array to / from base64 and hex stage 3 proposal:
    • Fixed several V8 bugs in Uint8Array.fromHex and Uint8Array.prototype.{ setFromBase64, toBase64, toHex }, thanks @ brc-dd
  • Joint iteration stage 2.7 proposal:
    • Uses Get in Iterator.zipKeyed, following tc39/proposal-joint-iteration#43
  • Iterator sequencing stage 2.7 proposal:
    • Iterator.concat no longer reuses IteratorResult object of concatenated iterators, following tc39/proposal-iterator-sequencing#26
  • Iterator chunking stage 2 proposal:
    • Added built-ins:
      • Iterator.prototype.sliding
  • Number.prototype.clamp stage 2 proposal:
    • clamp no longer throws an error on NaN as min or max, following tc39/proposal-math-clamp#d2387791c265edf66fbe2455eab919016717ce6f
  • Fixed some cases of Set.prototype.{ symmetricDifference, union } detection
  • Added missing dependencies to some entries of static Iterator methods
  • Added missing /full/{ instance, number/virtual }/clamp entries
  • Some minor stylistic changes
  • Compat data improvements:
    • Added Electron 38 and 39 compat data mapping
    • Added Oculus Quest Browser 38 and 39 compat data mapping
    • Iterator helpers marked as fixed and updated following the latest spec changes in Safari 26.0
    • Set.prototype.{ difference, symmetricDifference, union } marked as fixed in Safari 26.0
    • SuppressedError marked as fixed in FF141
    • Error.isError marked as fixed in Node 24.3
    • setImmediate and clearImmediate marked as available from Deno 2.4
    • Math.sumPrecise marked as shipped in Bun 1.2.18
    • %TypedArray%.prototype.with marked as fixed in Bun 1.2.18
• 3.43.0 - 2025-06-09
  
  • Changes v3.42.0...v3.43.0 (139 commits)
  • Explicit Resource Management proposals:
    • Built-ins:
      • Symbol.dispose
      • Symbol.asyncDispose
      • SuppressedError
      • DisposableStack
        • DisposableStack.prototype.dispose
        • DisposableStack.prototype.use
        • DisposableStack.prototype.adopt
        • DisposableStack.prototype.defer
        • DisposableStack.prototype.move
        • DisposableStack.prototype[@@ dispose]
      • AsyncDisposableStack
        • AsyncDisposableStack.prototype.disposeAsync
        • AsyncDisposableStack.prototype.use
        • AsyncDisposableStack.prototype.adopt
        • AsyncDisposableStack.prototype.defer
        • AsyncDisposableStack.prototype.move
        • AsyncDisposableStack.prototype[@@ asyncDispose]
      • Iterator.prototype[@@ dispose]
      • AsyncIterator.prototype[@@ asyncDispose]
    • Moved to stable ES, May 2025 TC39 meeting
    • Added es. namespace module, /es/ and /stable/ namespaces entries
  • Array.fromAsync proposal:
    • Built-ins:
      • Array.fromAsync
    • Moved to stable ES, May 2025 TC39 meeting
    • Added es. namespace module, /es/ and /stable/ namespaces entries
  • Error.isError proposal:
    • Built-ins:
      • Error.isError
    • Moved to stable ES, May 2025 TC39 meeting
    • Added es. namespace module, /es/ and /stable/ namespaces entries
  • Added Joint iteration stage 2.7 proposal:
    • Added built-ins:
      • Iterator.zip
      • Iterator.zipKeyed
  • Added Iterator chunking stage 2 proposal:
    • Added built-ins:
      • Iterator.prototype.chunks
      • Iterator.prototype.windows
  • Number.prototype.clamp proposal:
    • Built-ins:
      • Number.prototype.clamp
    • Moved to stage 2, May 2025 TC39 meeting
    • Math.clamp was replaced with Number.prototype.clamp
    • Removed a RangeError if min <= max or +0 min and -0 max, tc39/proposal-math-clamp/#22
  • Always check regular expression flags by flags getter PR. Native methods are not fixed, only own implementation updated for:
    • RegExp.prototype[@@ match]
    • RegExp.prototype[@@ replace]
  • Improved handling of RegExp flags in polyfills of some methods in engines without proper support of RegExp.prototype.flags and without polyfill of this getter
  • Added feature detection for a WebKit bug that occurs when this is updated while Set.prototype.difference is being executed
  • Added feature detection for a WebKit bug that occurs when iterator record of a set-like object isn't called before cloning this in the following methods:
    • Set.prototype.symmetricDifference
    • Set.prototype.union
  • Added feature detection for a bug in V8 ~ Chromium < 126. Following methods should throw an error on invalid iterator:
    • Iterator.prototype.drop
    • Iterator.prototype.filter
    • Iterator.prototype.flatMap
    • Iterator.prototype.map
  • Added feature detection for a WebKit bug: incorrect exception thrown by Iterator.from when underlying iterator's return method is null
  • Added feature detection for a FF bug: incorrect exception thrown by Array.prototype.with when index coercion fails
  • Added feature detection for a WebKit bug: TypedArray.prototype.with should truncate negative fractional index to zero, but instead throws an error
  • Worked around a bug of many different tools (example) with incorrect transforming and breaking JS syntax on getting a method from a number literal
  • Fixed deoptimization of the Promise polyfill in the pure version
  • Added some missed dependencies to /iterator/flat-map entries
  • Some other minor fixes and improvements
  • Compat data improvements:
    • Added Deno 2.3 and Deno 2.3.2 compat data mapping
    • Updated Electron 37 compat data mapping
    • Added Opera Android 90 compat data mapping
    • Error.isError marked not supported in Node because of a bug
    • Set.prototype.difference marked as not supported in Safari and supported only from Bun 1.2.5 because of a bug
    • Set.prototype.{ symmetricDifference, union } marked as not supported in Safari and supported only from Bun 1.2.5 because of a bug
    • Iterator.from marked as not supported in Safari and supported only from Bun 1.2.5 because of a bug
    • Iterators closing on early errors in Iterator helpers marked as implemented from FF141
    • Array.prototype.with marked as supported only from FF140 because it throws an incorrect exception when index coercion fails
    • TypedArray.prototype.with marked as unsupported in Bun and Safari because it should truncate negative fractional index to zero, but instead throws an error
    • DisposableStack and AsyncDisposableStack marked as shipped in FF141 (SuppressedError has a bug)
    • AsyncDisposableStack bugs marked as fixed in Deno 2.3.2
    • SuppressedError bugs (extra arguments support and arity) marked as fixed in Bun 1.2.15

from core-js GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud