[Snyk] Upgrade core-js from 3.38.1 to 3.39.0

[lane-formio]

Snyk has created this PR to upgrade core-js from 3.38.1 to 3.39.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.

• The recommended version was released on 23 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Pollution SNYK-JS-DOMPURIFY-7984421	372	No Known Exploit
	Template Injection SNYK-JS-DOMPURIFY-6474511	372	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-DOMPURIFY-8184974	372	Proof of Concept

Release notes

Package name: core-js

• 3.39.0 - 2024-10-31
  
  • Changes v3.38.1...v3.39.0
  • Iterator helpers proposal:
    • Built-ins:
      • Iterator
        • Iterator.from
        • Iterator.prototype.drop
        • Iterator.prototype.every
        • Iterator.prototype.filter
        • Iterator.prototype.find
        • Iterator.prototype.flatMap
        • Iterator.prototype.forEach
        • Iterator.prototype.map
        • Iterator.prototype.reduce
        • Iterator.prototype.some
        • Iterator.prototype.take
        • Iterator.prototype.toArray
        • Iterator.prototype[@@ toStringTag]
    • Moved to stable ES, October 2024 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespaces entries
  • Promise.try:
    • Built-ins:
      • Promise.try
    • Moved to stable ES, October 2024 TC39 meeting
    • Added es. namespace module, /es/ and /stable/ namespaces entries
    • Fixed /actual|full/promise/try entries for the callback arguments support
  • Math.sumPrecise proposal:
    • Built-ins:
      • Math.sumPrecise
    • Moved to stage 3, October 2024 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Added Iterator sequencing stage 2.7 proposal:
    • Added built-ins:
      • Iterator.concat
  • Map upsert stage 2 proposal:
    • Updated to the new API following the October 2024 TC39 meeting
    • Added built-ins:
      • Map.prototype.getOrInsert
      • Map.prototype.getOrInsertComputed
      • WeakMap.prototype.getOrInsert
      • WeakMap.prototype.getOrInsertComputed
  • Extractors proposal moved to stage 2, October 2024 TC39 meeting
  • Usage of @@ species pattern removed from %TypedArray% and ArrayBuffer methods, tc39/ecma262/3450:
    • Built-ins:
      • %TypedArray%.prototype.filter
      • %TypedArray%.prototype.filterReject
      • %TypedArray%.prototype.map
      • %TypedArray%.prototype.slice
      • %TypedArray%.prototype.subarray
      • ArrayBuffer.prototype.slice
  • Some other minor improvements
  • Compat data improvements:
    • Uint8Array to / from base64 and hex proposal methods marked as shipped from FF133
    • Added NodeJS 23.0 compat data mapping
    • self descriptor is fixed in Deno 1.46.0
    • Added Deno 1.46 and 2.0 compat data mapping
    • Iterator helpers proposal methods marked as shipped from Bun 1.1.31
    • Added Electron 34 and updated Electron 33 compat data mapping
    • Added Opera Android 85 compat data mapping
    • Added Oculus Quest Browser 35 compat data mapping
• 3.38.1 - 2024-08-20
  
  • Changes v3.38.0...v3.38.1
  • Fixed some cases of URLSearchParams percent decoding, #1357, #1361, thanks @ slowcheetah
  • Some stylistic changes and minor optimizations
  • Compat data improvements:
    • Iterator helpers proposal methods marked as shipped from FF131
    • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from Bun 1.1.23
    • RegExp.escape marked as shipped from Bun 1.1.22
    • Promise.try marked as shipped from Bun 1.1.22
    • Uint8Array to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22
    • Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes
    • Added Opera Android 84 compat data mapping

from core-js GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs