dependabot[bot] opened a new pull request, #38939: URL: https://github.com/apache/superset/pull/38939
Bumps [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) from 3.48.0 to 3.49.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zloirock/core-js/blob/master/CHANGELOG.md";>core-js's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/zloirock/core-js/releases/tag/v3.49.0";>3.49.0 - 2026.03.16</a></h3> <ul> <li>Changes <a href="https://github.com/zloirock/core-js/compare/v3.48.0...v3.49.0";>v3.48.0...v3.49.0</a> (373 commits)</li> <li><a href="https://github.com/tc39/proposal-iterator.range";><code>Iterator.range</code></a> updated following the actual spec version <ul> <li>Throw a <code>RangeError</code> on <code>NaN</code> <code>start</code> / <code>end</code> / <code>step</code></li> <li>Allow <code>null</code> as <code>optionOrStep</code></li> </ul> </li> <li>Improved accuracy of <code>Math.{ asinh, atanh }</code> polyfills with big and small values</li> <li>Improved accuracy of <code>Number.prototype.toExponential</code> polyfills with big and small values</li> <li>Improved performance of <code>atob</code>, <code>btoa</code>, <code>Uint8Array.fromHex</code>, <code>Uint8Array.prototype.setFromHex</code>, and <code>Uint8Array.prototype.toHex</code>, <a href="https://redirect.github.com/zloirock/core-js/issues/1503";>#1503</a>, <a href="https://redirect.github.com/zloirock/core-js/issues/1464";>#1464</a>, <a href="https://redirect.github.com/zloirock/core-js/issues/1510";>#1510</a>, thanks <a href="https://github.com/johnzhou721";><strong><code>@johnzhou721</code></strong></a></li> <li>Minor performance optimization polyfills of methods from <a href="https://github.com/tc39/proposal-upsert";><code>Map</code> upsert proposal</a></li> <li>Polyfills of methods from <a href="https://github.com/tc39/proposal-upsert";><code>Map</code> upsert proposal</a> from the pure version made generic to make it work with polyfilled and native collections</li> <li>Wrap <code>Symbol.for</code> in <code>Symbol.prototype.description</code> polyfill for correct handling of empty string descriptions</li> <li>Fixed <a href="https://bugs.webkit.org/show_bug.cgi?id=309342";>a modern Safari bug</a> in <code>Array.prototype.includes</code> with sparse arrays and <code>fromIndex</code></li> <li>Fixed one more case (<code>Iterator.prototype.take</code>) of a V8 ~ Chromium < 126 <a href="https://issues.chromium.org/issues/336839115";>bug</a></li> <li>Forced replacement of <code>Iterator.{ concat, zip, zipKeyed }</code> in the pure version for ensuring proper wrapped <code>Iterator</code> instances as the result</li> <li>Fixed proxying <code>.return()</code> on exhausted iterator from some methods of iterator helpers polyfill to the underlying iterator</li> <li>Fixed double <code>.return()</code> calling in case of throwing error in this method in the internal <code>iterate</code> helper that affected some polyfills</li> <li>Fixed closing iterator on <code>IteratorValue</code> errors in the internal <code>iterate</code> helper that affected some polyfills</li> <li>Fixed iterator closing in <code>Array.from</code> polyfill on failure to create array property</li> <li>Fixed order of arguments validation in <code>Array.fromAsync</code> polyfill</li> <li>Fixed a lack of counter validation on <code>MAX_SAFE_INTEGER</code> in <code>Array.fromAsync</code> polyfill</li> <li>Fixed order of arguments validation in <code>Array.prototype.flat</code> polyfill</li> <li>Fixed handling strings as iterables in <code>Iterator.{ zip, zipKeyed }</code> polyfills</li> <li>Fixed some cases of iterators closing in <code>Iterator.{ zip, zipKeyed }</code> polyfills</li> <li>Fixed validation of iterators <code>.next()</code> results an objects in <code>Iterator.{ zip, zipKeyed }</code> polyfills</li> <li>Fixed a lack of early error in <code>Iterator.concat</code> polyfill on primitive as an iterator</li> <li>Fixed buffer mutation exposure in <code>Iterator.prototype.windows</code> polyfill</li> <li>Fixed iterator closing in <code>Set.prototype.{ isDisjointFrom, isSupersetOf }</code> polyfill</li> <li>Fixed (updated following the final spec) one more case <code>Set.prototype.difference</code> polyfill with updating <code>this</code></li> <li>Fixed <code>DataView.prototype.setFloat16</code> polyfill in (0, 1) range</li> <li>Fixed order of arguments validation in <code>String.prototype.{ padStart, padEnd }</code> polyfills</li> <li>Fixed order of arguments validation in <code>String.prototype.{ startsWith, endsWith }</code> polyfills</li> <li>Fixed some cases of <code>Infinity</code> handling in <code>String.prototype.substr</code> polyfill</li> <li>Fixed <code>String.prototype.repeat</code> polyfill with a counter exceeding 2 ** 32</li> <li>Fixed some cases of chars case in <code>escape</code> polyfill</li> <li>Fixed named backreferences in <code>RegExp</code> NCG polyfill</li> <li>Fixed some cases of <code>RegExp</code> NCG polyfill in combination with other types of groups</li> <li>Fixed some cases of <code>RegExp</code> NCG polyfill in combination with <code>dotAll</code></li> <li>Fixed <code>String.prototype.replace</code> with <code>sticky</code> polyfill, <a href="https://redirect.github.com/zloirock/core-js/issues/810";>#810</a>, <a href="https://redirect.github.com/zloirock/core-js/issues/1514";>#1514</a></li> <li>Fixed <code>RegExp</code> <code>sticky</code> polyfill with alternation</li> <li>Fixed handling of some line terminators in case of <code>multiline</code> + <code>sticky</code> mode in <code>RegExp</code> polyfill</li> <li>Fixed <code>.input</code> slicing on result object with <code>RegExp</code> <code>sticky</code> mode polyfill</li> <li>Fixed handling of empty groups with <code>global</code> and <code>unicode</code> modes in polyfills</li> <li>Fixed <code>URLSearchParam.prototype.delete</code> polyfill with duplicate key-value pairs</li> <li>Fixed possible removal of unnecessary entries in <code>URLSearchParam.prototype.delete</code> polyfill with second argument</li> <li>Fixed an error in some cases of non-special URLs without a path in the <code>URL</code> polyfill</li> <li>Fixed some percent encode cases / character sets in the <code>URL</code> polyfill</li> <li>Fixed parsing of non-IPv4 hosts ends in a number in the <code>URL</code> polyfill</li> <li>Fixed some cases of <code>''</code> and <code>null</code> host handling in the <code>URL</code> polyfill</li> <li>Fixed host parsing with <code>hostname = host:port</code> in the <code>URL</code> polyfill</li> <li>Fixed host inheritance in some cases of file scheme in the <code>URL</code> polyfill</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zloirock/core-js/commit/80adfc415fa74e5e4f6ba2de6425aa577e3ad439";><code>80adfc4</code></a> v3.49.0</li> <li><a href="https://github.com/zloirock/core-js/commit/0ad3e0035b87ac941ccadc643397bb7825d4e694";><code>0ad3e00</code></a> fix a modern Safari bug in <code>Array.prototype.includes</code> with sparse arrays and ...</li> <li><a href="https://github.com/zloirock/core-js/commit/853bfa4906ea01ad18791f1fccb2b67440ffacf9";><code>853bfa4</code></a> update some links</li> <li><a href="https://github.com/zloirock/core-js/commit/b4d723fbb277d9805c78c75bb529e7f175e9af0f";><code>b4d723f</code></a> fix a lack of counter validation on <code>MAX_SAFE_INTEGER</code> in <code>Array.fromAsync</code> p...</li> <li><a href="https://github.com/zloirock/core-js/commit/e27667656589bb1ff058e1a2afbdd866e3872d51";><code>e276676</code></a> fix parsing of non-IPv4 hosts ends in a number in the <code>URL</code> polyfill</li> <li><a href="https://github.com/zloirock/core-js/commit/dd1cfba7cf2076f1e088a23af03f7124abdd91b0";><code>dd1cfba</code></a> fix order of arguments validation in <code>String.prototype.{ padStart, padEnd }</code> ...</li> <li><a href="https://github.com/zloirock/core-js/commit/b952c5faef9092b20d0f9833b0b282a91ede8914";><code>b952c5f</code></a> add an extra protection to configurator</li> <li><a href="https://github.com/zloirock/core-js/commit/e490cafd755a14ae150db2d7515af51175d5e421";><code>e490caf</code></a> Fix for <a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/810";>#810</a> (<a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/1514";>#1514</a>)</li> <li><a href="https://github.com/zloirock/core-js/commit/10b4e86e3ce7d0675fd19b9028118162510307b9";><code>10b4e86</code></a> drop an unneeded comment</li> <li><a href="https://github.com/zloirock/core-js/commit/28cf2e9b16f45430f35ef8658c7a461d50cca69e";><code>28cf2e9</code></a> feat: Improve performance of Uint8Array Hex functions (<a href="https://github.com/zloirock/core-js/tree/HEAD/packages/core-js/issues/1510";>#1510</a>)</li> <li>Additional commits viewable in <a href="https://github.com/zloirock/core-js/commits/v3.49.0/packages/core-js";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
