Skip to content

Bump the javascript-prod group across 1 directory with 2 updates - #657

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/javascript-prod-f0bfd47bb2
Open

Bump the javascript-prod group across 1 directory with 2 updates#657
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/javascript-prod-f0bfd47bb2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the javascript-prod group with 2 updates in the / directory: core-js and select2.

Updates core-js from 3.49.0 to 3.50.0

Release notes

Sourced from core-js's releases.

3.50.0 - 2026.08.05

  • Changes v3.49.0...v3.50.0 (138 commits)
  • Joint iteration proposal:
    • Built-ins:
      • Iterator.zip
      • Iterator.zipKeyed
    • Moved to stable ES, May 2026 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespace entries
  • Iterator chunking proposal:
    • Built-ins:
      • Iterator.prototype.chunks
      • Iterator.prototype.windows
    • Throw a TypeError instead of RangeError on non-integer number chunkSize / windowSize, following [tc39/proposal-iterator-chunking/#30](tc39/proposal-iterator-chunking#30)
    • Moved to stage 3, May 2026 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Added Iterator includes stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.includes
  • Added Iterator join stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.join
  • Added Await dictionary of Promises stage 3 proposal:
    • Added built-ins:
      • Promise.allKeyed
      • Promise.allSettledKeyed
  • Throw a RangeError on finite unsafe integer limit in Iterator.prototype.{ drop, take }, following [tc39/ecma262/#3776](tc39/ecma262#3776)
  • Use PromiseResolve semantics in Promise.try, following [tc39/ecma262/#3883](tc39/ecma262#3883)
  • Added detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap bug case, #1538
  • Deno 2.9+ replaces Object.prototype.__proto__ instead of removing it, so the feature detection updated
  • Fixed JSON.stringify polyfill with an array replacer - keys order now follows the replacer, inherited and non-enumerable properties are no longer ignored, #1539
  • Make URL / URLSearchParams parsing a little more correct (char sets, percent coding, etc)
  • Ensure opaque paths always roundtrip in URL polyfill (still without adding to feature detection), whatwg/url#844
  • Fix URL#toJSON when URL#toString is reassigned after core-js is imported
  • Fixed possible crash on some keys in Symbol.for
  • Some get-iterator / get-iterator-method fixes
  • Fixed String.prototype.{ match, search } polyfills conversion order
  • Added missed MAX_SAFE_INTEGER excess check in Array.from and { Map, Object }.groupBy polyfills
  • Improved the way of inner iterators cleaning in iterator helpers
  • Improved accuracy of Math.{ asinh, cbrt, log1p } polyfills with big and small values
  • Improved performance of Uint8Array base64 methods
  • Improved performance of escape
  • Slight performance improvement for engines with native Array.prototype.fill on ArrayBuffer constructor and %TypedArray%.prototype.fill
  • Clarify supported Node versions in package.json of some missed packages (just to satisfy publint)
  • Compat data improvements:

... (truncated)

Changelog

Sourced from core-js's changelog.

3.50.0 - 2026.08.05

  • Changes v3.49.0...v3.50.0 (138 commits)
  • Joint iteration proposal:
    • Built-ins:
      • Iterator.zip
      • Iterator.zipKeyed
    • Moved to stable ES, May 2026 TC39 meeting
    • Added es. namespace modules, /es/ and /stable/ namespace entries
  • Iterator chunking proposal:
    • Built-ins:
      • Iterator.prototype.chunks
      • Iterator.prototype.windows
    • Throw a TypeError instead of RangeError on non-integer number chunkSize / windowSize, following [tc39/proposal-iterator-chunking/#30](tc39/proposal-iterator-chunking#30)
    • Moved to stage 3, May 2026 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Added Iterator includes stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.includes
  • Added Iterator join stage 3 proposal:
    • Added built-in:
      • Iterator.prototype.join
  • Added Await dictionary of Promises stage 3 proposal:
    • Added built-ins:
      • Promise.allKeyed
      • Promise.allSettledKeyed
  • Throw a RangeError on finite unsafe integer limit in Iterator.prototype.{ drop, take }, following [tc39/ecma262/#3776](tc39/ecma262#3776)
  • Use PromiseResolve semantics in Promise.try, following [tc39/ecma262/#3883](tc39/ecma262#3883)
  • Added detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap bug case, #1538
  • Deno 2.9+ replaces Object.prototype.__proto__ instead of removing it, so the feature detection updated
  • Fixed JSON.stringify polyfill with an array replacer - keys order now follows the replacer, inherited and non-enumerable properties are no longer ignored, #1539
  • Make URL / URLSearchParams parsing a little more correct (char sets, percent coding, etc)
  • Ensure opaque paths always roundtrip in URL polyfill (still without adding to feature detection), whatwg/url#844
  • Fix URL#toJSON when URL#toString is reassigned after core-js is imported
  • Fixed possible crash on some keys in Symbol.for
  • Some get-iterator / get-iterator-method fixes
  • Fixed String.prototype.{ match, search } polyfills conversion order
  • Added missed MAX_SAFE_INTEGER excess check in Array.from and { Map, Object }.groupBy polyfills
  • Improved the way of inner iterators cleaning in iterator helpers
  • Improved accuracy of Math.{ asinh, cbrt, log1p } polyfills with big and small values
  • Improved performance of Uint8Array base64 methods
  • Improved performance of escape
  • Slight performance improvement for engines with native Array.prototype.fill on ArrayBuffer constructor and %TypedArray%.prototype.fill
  • Clarify supported Node versions in package.json of some missed packages (just to satisfy publint)
  • Compat data improvements:

... (truncated)

Commits
  • 486e8d6 v3.50.0
  • 6a78c6a Cache URL#toString (#1533)
  • 5d4f138 fix: correct Iterator zip entry exports
  • 7e8e1cc rename method for consistency
  • 2507115 fix JSON.stringify polyfill with an array replacerJSON.stringify polyfill...
  • 4036342 make URL / URLSearchParams parsing a little more correct (char sets, perc...
  • 37375ba fix order of detection
  • 276de47 add detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap b...
  • 6e4a942 use PromiseResolve semantics in Promise.try
  • ff52b9f backport await dictionary stage 3 proposal
  • Additional commits viewable in compare view

Updates select2 from 4.0.13 to 4.1.0

Release notes

Sourced from select2's releases.

Select2 4.1.0

Breaking changes

  • The minimum jQuery version supported is the latest version in the 1.x, 2.x, 3.x, and 4.x series (#5525, #5955)
  • Removed support for legacy Internet Explorer (versions older than IE 11) (#5834)
  • Removed modules deprecated in 4.0.0 (#5815)
    • Removed legacy support for <input /> tags
    • Removed legacy support for initSelection
    • Removed legacy support for query
    • Removed old select2/compat/matcher module
  • Removed undocumented CSS-related options (#5815)
    • Removed dropdownCss option
    • Removed adaptDropdownCss option
    • Removed containerCss option
    • Removed adaptContainerCss option
  • The containerCssClass option has been renamed to selectionCssClass (#5815, #5847)
  • Significant changes to the HTML/CSS for the selection area impacting custom themes (#5842)
  • New CSS classes for the dropdown results to better target highlighted / selected results (#5841)
  • The search box in the selection area for multiple selects has been changed from an <input /> to a <textarea> to support pasting multiple lines (#5806)
  • Change tab key to select the currently highlighted option instead of just closing (#5759)
  • Tags will be highlighted first in the results even if other options have been selected (#5812)

New features / improvements

  • dropdownCssClass and selectionCssClass are now available in all builds of Select2 (#5815)
  • Calls to get the currently selected options are now considerably faster on large datasets (#5775)
  • Selected results in the dropdown should now be properly announced to screen readers (#5841)
  • Significant improvements were made to make the selection area accessible (#5824, #5842, #5916, #5942, #5973)
  • Allow pasting multiple lines into the search field for tokenization (#5806)
  • Add support for jQuery 4.0.0 (#6332)
  • Add originalEvent to close trigger arguments (#6079)

Bug fixes

  • Resize the selection search on close to properly display the placeholder (#5766)
  • Change internal data ID generation to be more unique and prevent conflicts with numeric IDs (#5840)
  • Internet Explorer 11 no longer steals focus of search box while tagging (#5842)
  • Fix slow memory leak caused by not clearing cache on destroy (#5965)
  • Fix multiple select placeholder misalignment (#6277)
  • Fix RTL selection__choice__remove button (#6257)
  • Fix support for data-placeholder values which consist solely of digits (#6297)
  • Fix unselection of items from AJAX data sources with non-string identifiers (#6241, #6335)
  • Convert optgroup child data identifiers to string datatype (#6338)

Translations

  • Add Esperanto translation (eo) (#5823)
  • Add Punjabi translations (pa) (#5831)
  • Add Telugu translations (te) (#5881)
  • Updated Hungarian translations (hu) for 4.1.0 changes (#5970)

... (truncated)

Changelog

Sourced from select2's changelog.

4.1.0

Breaking changes

  • The minimum jQuery version supported is the latest version in the 1.x, 2.x, and 3.x series (#5525, #5955)
  • Removed support for legacy Internet Explorer (versions older than IE 11) (#5834)
  • Removed modules deprecated in 4.0.0 (#5815)
    • Removed legacy support for <input /> tags
    • Removed legacy support for initSelection
    • Removed legacy support for query
    • Removed old select2/compat/matcher module
  • Removed undocumented CSS-related options (#5815)
    • Removed dropdownCss option
    • Removed adaptDropdownCss option
    • Removed containerCss option
    • Removed adaptContainerCss option
  • The containerCssClass option has been renamed to selectionCssClass (#5815, #5847)
  • Significant changes to the HTML/CSS for the selection area impacting custom themes (#5842)
  • New CSS classes for the dropdown results to better target highlighted / selected results (#5841)
  • The search box in the selection area for multiple selects has been changed from an <input /> to a <textarea> to support pasting multiple lines (#5806)
  • Change tab key to select the currently highlighted option instead of just closing (#5759)
  • Tags will be highlighted first in the results even if other options have been selected (#5812)

New features / improvements

  • dropdownCssClass and selectionCssClass are now available in all builds of Select2 (#5815)
  • Calls to get the currently selected options are now considerably faster on large datasets (#5775)
  • Selected results in the dropdown should now be properly announced to screen readers (#5841)
  • Significant improvements were made to make the selection area accessible (#5824, #5842, #5916, #5942, #5973)
  • Allow pasting multiple lines into the search field for tokenization (#5806)
  • Add support for jQuery 4.0.0 (#6332)
  • Add originalEvent to close trigger arguments (#6079)

Bug fixes

  • Resize the selection search on close to properly display the placeholder (#5766)
  • Change internal data ID generation to be more unique and prevent conflicts with numeric IDs (#5840)
  • Internet Explorer 11 no longer steals focus of search box while tagging (#5842)
  • Fix slow memory leak caused by not clearing cache on destroy (#5965)
  • Fix multiple select placeholder misalignment (#6277)
  • Fix RTL selection__choice__remove button (#6257)
  • Fix support for data-placeholder values which consist solely of digits (#6297)
  • Fix unselection of items from AJAX data sources with non-string identifiers (#6241, #6335)
  • Convert optgroup child data identifiers to string datatype (#6338)

Translations

  • Add Esperanto translation (eo) (#5823)
  • Add Punjabi translations (pa) (#5831)
  • Add Telugu translations (te) (#5881)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for select2 since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the javascript-prod group across 1 directory with 2 updates
50671e8 
Bumps the javascript-prod group with 2 updates in the / directory: [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) and [select2](https://github.com/select2/select2).


Updates `core-js` from 3.49.0 to 3.50.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.50.0/packages/core-js)

Updates `select2` from 4.0.13 to 4.1.0
- [Release notes](https://github.com/select2/select2/releases)
- [Changelog](https://github.com/select2/select2/blob/develop/CHANGELOG.md)
- [Commits](select2/select2@4.0.13...4.1.0)

---
updated-dependencies:
- dependency-name: core-js
  dependency-version: 3.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-prod
- dependency-name: select2
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants