Bump the javascript-dev group across 1 directory with 2 updates by dependabot[bot] · Pull Request #574 · OpenConext/Stepup-RA

dependabot · 2026-11-12T17:14:07Z

Bumps the javascript-dev group with 2 updates in the / directory: core-js and webpack.

Updates core-js from 3.50.0 to 3.51.0

Release notes

3.51.0 - 2026.10.19

Changes v3.50.0...v3.51.0 (62 commits)

Iterator chunking proposal:

Built-ins:

Iterator.prototype.chunks

Iterator.prototype.windows

Moved to stable ES, September 2026 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespace entries

Iterator includes proposal:

Built-in:

Iterator.prototype.includes

Moved to stable ES, September 2026 TC39 meeting

Added es. namespace module, /es/ and /stable/ namespace entries

Iterator join proposal:

Built-in:

Iterator.prototype.join

Moved to stable ES, September 2026 TC39 meeting

Added es. namespace module, /es/ and /stable/ namespace entries

Added detection / fix of Math.sumPrecise negative numbers handling WebKit bug

Added detection / fix of Math.sumPrecise V8 bugs with modified prototypes of arrays and array iterators

Added detection / fix of RegExp.escape code points handling WebKit bug

Added missed detection of imprecise native Math.asinh in V8 < 5.4 and Rhino

Added missed detection of imprecise native Math.cbrt in FF < 48 and engines that use glibc cbrt

Fixed Promise.{ allKeyed, allSettledKeyed } algorithm for sync promises

Compat data improvements:

Iterator.{ zip, zipKeyed } marked as shipped in V8 ~ Chrome 153

Iterator.prototype.includes marked as shipped in V8 ~ Chrome 154

Iterator.prototype.join marked as shipped in V8 ~ Chrome 153

Promise.{ allKeyed, allSettledKeyed } marked as shipped in FF155

Iterator.prototype.{ drop, take } marked as properly supported with [tc39/ecma262/#3776](tc39/ecma262#3776) from FF158

Iterator.{ zip, zipKeyed } marked as shipped in Bun 1.4.0

Iterator.prototype.{ chunks, windows } marked as shipped in Bun 1.4.0

Iterator.prototype.join marked as shipped in Bun 1.4.0

Because of a Math.sumPrecise negative numbers handling WebKit bug, this method is marked as not supported in Safari and Bun

Because of Math.sumPrecise V8 bugs (see above), this method is marked as not supported in Chrome -> all other V8 engines

RegExp.escape code points handling WebKit bug:

Marked as still not fixed in stable Safari

Marked as fixed in Bun 1.4.3

Because of imprecision (see above), Math.asinh is marked as supported from V8 ~ Chrome 54 and as not supported in Rhino, Math.cbrt - from FF48

Added Node 27.0 compat data mapping

Updated Electron 45 and added 46 compat data mapping

Added Samsung Browser 31 compat data mapping

Added Opera for Android 101 and 102 compat data mapping

Changelog

Sourced from core-js's changelog.

3.51.0 - 2026.10.19

Changes v3.50.0...v3.51.0 (62 commits)

Iterator chunking proposal:

Built-ins:

Iterator.prototype.chunks

Iterator.prototype.windows

Moved to stable ES, September 2026 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespace entries

Iterator includes proposal:

Built-in:

Iterator.prototype.includes

Moved to stable ES, September 2026 TC39 meeting

Added es. namespace module, /es/ and /stable/ namespace entries

Iterator join proposal:

Built-in:

Iterator.prototype.join

Moved to stable ES, September 2026 TC39 meeting

Added es. namespace module, /es/ and /stable/ namespace entries

Added detection / fix of Math.sumPrecise negative numbers handling WebKit bug

Added detection / fix of Math.sumPrecise V8 bugs with modified prototypes of arrays and array iterators

Added detection / fix of RegExp.escape code points handling WebKit bug

Added missed detection of imprecise native Math.asinh in V8 < 5.4 and Rhino

Added missed detection of imprecise native Math.cbrt in FF < 48 and engines that use glibc cbrt

Fixed Promise.{ allKeyed, allSettledKeyed } algorithm for sync promises

Compat data improvements:

Iterator.{ zip, zipKeyed } marked as shipped in V8 ~ Chrome 153

Iterator.prototype.includes marked as shipped in V8 ~ Chrome 154

Iterator.prototype.join marked as shipped in V8 ~ Chrome 153

Promise.{ allKeyed, allSettledKeyed } marked as shipped in FF155

Iterator.prototype.{ drop, take } marked as properly supported with [tc39/ecma262/#3776](tc39/ecma262#3776) from FF158

Iterator.{ zip, zipKeyed } marked as shipped in Bun 1.4.0

Iterator.prototype.{ chunks, windows } marked as shipped in Bun 1.4.0

Iterator.prototype.join marked as shipped in Bun 1.4.0

Because of a Math.sumPrecise negative numbers handling WebKit bug, this method is marked as not supported in Safari and Bun

Because of Math.sumPrecise V8 bugs (see above), this method is marked as not supported in Chrome -> all other V8 engines

RegExp.escape code points handling WebKit bug:

Marked as still not fixed in stable Safari

Marked as fixed in Bun 1.4.3

Because of imprecision (see above), Math.asinh is marked as supported from V8 ~ Chrome 54 and as not supported in Rhino, Math.cbrt - from FF48

Added Node 27.0 compat data mapping

Updated Electron 45 and added 46 compat data mapping

Added Samsung Browser 31 compat data mapping

Added Opera for Android 101 and 102 compat data mapping

Commits

633931a v3.51.0
1dfe94e add missed detection of imprecise native Math.{ asinh, cbrt }
e1ecf25 fix Promise.{ allKeyed, allSettledKeyed } algorithm for sync promises
9b69e68 add detection / fix of Math.sumPrecise V8 bugs
bb0a65f add detection / fix of Math.sumPrecise negative numbers handling WebKit bug
b70f13b update eslint-plugin-unicorn
e6d323a add detection / fix of RegExp.escape code points handling WebKit bug
d6561e3 move Iterator chunking to stable ES
ce38a98 move Iterator.prototype.includes to stable ES
bceffe8 move Iterator.prototype.join to stable ES
See full diff in compare view

Updates webpack from 5.111.1 to 5.112.2

Release notes

Sourced from webpack's releases.

v5.112.2

Patch Changes

Reduce repeated scans when concatenating imported modules. (by @xiaoxiaojx in #22865)

Avoid allocating CSS module sets for single-group chunks. (by @xiaoxiaojx in #22866)

Return the value of every module type loaded with importModule(). (by @alexander-akait in #22869)

v5.112.1

Patch Changes

Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by @aryanraj45 in #22699)

Rebuild under cacheUnaffected a module whose re-export target goes or returns. (by @aryanraj45 in #22749)

Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by @alexander-akait in #22791)

Fix exportType: "style" CSS modules throwing outside the runtime chunk. (by @lazerg in #22833)

Fix crash when a CSS module with exportType: "style" imports an ignored stylesheet. (by @codeXsidd in #22846)

Keep empty process environment variables that .env files don't define in DotenvPlugin. (by @alexander-akait in #22794)

Rehash an ESM entry chunk when a chunk it imports by file name changes. (by @alexander-akait in #22804)

Handle a NUL inside an HTML CDATA section the way the parsing spec does. (by @dependabot in #22811)

Keep module exports live across chunks, runtimes, HMR and eval, sparing globals. (by @alexander-akait in #22733)

Await asynchronous modules that ProvidePlugin injects into ES modules. (by @alexander-akait in #22728)

Keep a resolve that ends after the compiler closed from throwing. (by @alexander-akait in #22795)

Preserve string names passed to SharedWorker constructors. (by @bjohansebas in #22770)

Preserve string contents when extracting source map comments. (by @bjohansebas in #22768)

Scope strict-mode, async and generator block function declarations to their block. (by @alexander-akait in #22800)

Preserve raw dotenv values when reusing cached environment files. (by @Eshiv-Pandey in #22787)

Preserve assigned or patched built-ins, conversions and pattern targets. (by @aryanraj45 in #22761)

Keep globals a globalThis write replaces, and slice on a patched array. (by @alexander-akait in #22862)

Skip HTML script tags for shared chunks that emit no JavaScript. (by @bjohansebas in #22779)

Keep the digits Firefox lays out a minified CSS percentage with. (by @alexander-akait in #22718)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.2

Patch Changes

Reduce repeated scans when concatenating imported modules. (by @xiaoxiaojx in #22865)

Avoid allocating CSS module sets for single-group chunks. (by @xiaoxiaojx in #22866)

Return the value of every module type loaded with importModule(). (by @alexander-akait in #22869)

5.112.1

Patch Changes

Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by @aryanraj45 in #22699)

Rebuild under cacheUnaffected a module whose re-export target goes or returns. (by @aryanraj45 in #22749)

Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by @alexander-akait in #22791)

Fix exportType: "style" CSS modules throwing outside the runtime chunk. (by @lazerg in #22833)

Fix crash when a CSS module with exportType: "style" imports an ignored stylesheet. (by @codeXsidd in #22846)

Keep empty process environment variables that .env files don't define in DotenvPlugin. (by @alexander-akait in #22794)

Rehash an ESM entry chunk when a chunk it imports by file name changes. (by @alexander-akait in #22804)

Handle a NUL inside an HTML CDATA section the way the parsing spec does. (by @dependabot in #22811)

Keep module exports live across chunks, runtimes, HMR and eval, sparing globals. (by @alexander-akait in #22733)

Await asynchronous modules that ProvidePlugin injects into ES modules. (by @alexander-akait in #22728)

Keep a resolve that ends after the compiler closed from throwing. (by @alexander-akait in #22795)

Preserve string names passed to SharedWorker constructors. (by @bjohansebas in #22770)

Preserve string contents when extracting source map comments. (by @bjohansebas in #22768)

Scope strict-mode, async and generator block function declarations to their block. (by @alexander-akait in #22800)

Preserve raw dotenv values when reusing cached environment files. (by @Eshiv-Pandey in #22787)

Preserve assigned or patched built-ins, conversions and pattern targets. (by @aryanraj45 in #22761)

Keep globals a globalThis write replaces, and slice on a patched array. (by @alexander-akait in #22862)

Skip HTML script tags for shared chunks that emit no JavaScript. (by @bjohansebas in #22779)

... (truncated)

Commits

e95a7f2 chore(release): new release (#22867)
6e43fc2 fix: return the value of every module type from importModule() (#22869)
4ffac8d ci: rename the parser job to spec and run CSS, HTML and XML in one leg (#22870)
0c02242 test: split the syntax unit tests into tokenizer, parser and printer (#22825)
660608c perf(css): cut CPU and allocation in the CSS minifier (#22868)
8c3cbd3 perf: avoid allocating unused CSS module sets (#22866)
a1e5f6a perf: avoid duplicate scans in module concatenation (#22865)
759b539 chore(release): new release (#22720)
539f8de fix(minify): keep globals a globalThis write replaces, and slice on a pat...
9668155 ci: run the deep-imports check in the lint job (#22859)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the javascript-dev group with 2 updates in the / directory: [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) and [webpack](https://github.com/webpack/webpack). Updates `core-js` from 3.50.0 to 3.51.0 - [Release notes](https://github.com/zloirock/core-js/releases) - [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md) - [Commits](https://github.com/zloirock/core-js/commits/v3.51.0/packages/core-js) Updates `webpack` from 5.111.1 to 5.112.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.111.1...v5.112.2) --- updated-dependencies: - dependency-name: core-js dependency-version: 3.51.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dev - dependency-name: webpack dependency-version: 5.112.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: javascript-dev ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 12, 2026

Navigation Menu

Repository navigation

Bump the javascript-dev group across 1 directory with 2 updates - #574

Bump the javascript-dev group across 1 directory with 2 updates#574
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/javascript-dev-a8897a2f5b

dependabot Bot commented on behalf of github Nov 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.51.0 - 2026.10.19

3.51.0 - 2026.10.19

v5.112.2

Patch Changes

v5.112.1

Patch Changes

5.112.2

Patch Changes

5.112.1

Patch Changes

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 12, 2026 •

edited

Loading