Bump core-js from 3.36.1 to 3.38.1 in /web

[dependabot]

Bumps core-js from 3.36.1 to 3.38.1.

Changelog

Sourced from core-js's changelog.

3.38.1 - 2024.08.20

• Changes v3.38.0...v3.38.1
• Fixed some cases of URLSearchParams percent decoding, #1357, #1361, thanks @​slowcheetah
• Some stylistic changes and minor optimizations
• Compat data improvements:
  • Iterator helpers proposal methods marked as shipped from FF131
  • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from Bun 1.1.23
  • RegExp.escape marked as shipped from Bun 1.1.22
  • Promise.try marked as shipped from Bun 1.1.22
  • Uint8Array to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22
  • Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes
  • Added Opera Android 84 compat data mapping

3.38.0 - 2024.08.05

• Changes v3.37.1...v3.38.0
• RegExp.escape proposal:
  • Built-ins:
    • RegExp.escape
  • Moved to stage 3, June 2024 and July 2024 TC39 meetings
  • Updated the way of escaping, regex-escaping/77
  • Throw an error on non-strings, regex-escaping/58
  • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
• Promise.try proposal:
  • Built-ins:
    • Promise.try
  • Moved to stage 3, June 2024 TC39 meeting
  • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
• Uint8Array to / from base64 and hex stage 3 proposal:
  • Built-ins:
    • Uint8Array.fromBase64
    • Uint8Array.fromHex
    • Uint8Array.prototype.setFromBase64
    • Uint8Array.prototype.setFromHex
    • Uint8Array.prototype.toBase64
    • Uint8Array.prototype.toHex
  • Added Uint8Array.prototype.{ setFromBase64, setFromHex } methods
  • Added Uint8Array.fromBase64 and Uint8Array.prototype.setFromBase64 lastChunkHandling option, proposal-arraybuffer-base64/33
  • Added Uint8Array.prototype.toBase64 omitPadding option, proposal-arraybuffer-base64/60
  • Added throwing a TypeError on arrays backed by detached buffers
  • Unconditional forced replacement changed to feature detection
• Fixed RegExp named capture groups polyfill in combination with non-capturing groups, #1352, thanks @​Ulop
• Improved some cases of environment detection
• Uses process.getBuiltinModule for getting built-in NodeJS modules where it's available
• Uses https instead of http in URL constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345
• Some minor optimizations
• Updated browserslist in core-js-compat dependencies that fixes an upstream issue with incorrect interpretation of some browserslist queries, #1344, browserslist/829, browserslist/836
• Compat data improvements:
  • Added Safari 18.0 compat data:
    • Fixed Object.groupBy and Map.groupBy to work for non-objects
    • Fixed throwing a RangeError if Set methods are called on an object with negative size property

... (truncated)

Commits

• d1e7889 v3.38.1
• 9294082 use self-compare NaN check
• a79f40a Percent decode (#1361)
• 85f3639 enable some eslint sonar rules
• 5b69af0 use null instead of undefined as an empty placeholder in some cases
• 9cc1d63 use git+ in pkg.repository.url of all packages
• beccd4f enable some eslint sonar rules
• b35e68e enable sonar/inconsistent-function-call
• 4a322bf v3.38.0
• 9408792 replace a regex with a simple comparison
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)