From 2f78348c3dfc5f34532d5fa6399f390fe67c22d9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 18 Mar 2026 10:49:51 +0000
Subject: [PATCH] chore(deps): Bump core-js from 3.48.0 to 3.49.0

Bumps [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) from 3.48.0 to 3.49.0.
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.49.0/packages/core-js)

---
updated-dependencies:
- dependency-name: core-js
  dependency-version: 3.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 8 ++++----
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 34244c76558..fca1f8edc06 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -44,7 +44,7 @@
         "cancelable-promise": "^4.3.1",
         "clipboard": "^2.0.11",
         "color": "^5.0.3",
-        "core-js": "^3.48.0",
+        "core-js": "^3.49.0",
         "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
         "debounce": "^2.2.0",
         "dompurify": "^3.3.3",
@@ -11086,9 +11086,9 @@
       }
     },
     "node_modules/core-js": {
-      "version": "3.48.0",
-      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.48.0.tgz",
-      "integrity": "sha512-zpEHTy1fjTMZCKLHUZoVeylt9XrzaIN2rbPXEt0k+q7JE5CkCZdo6bNq55bn24a69CH7ErAVLKijxJja4fw+UQ==",
+      "version": "3.49.0",
+      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.49.0.tgz",
+      "integrity": "sha512-es1U2+YTtzpwkxVLwAFdSpaIMyQaq0PBgm3YD1W3Qpsn1NAmO3KSgZfu+oGSWVu6NvLHoHCV/aYcsE5wiB7ALg==",
       "hasInstallScript": true,
       "funding": {
         "type": "opencollective",
diff --git a/package.json b/package.json
index 5ffa84f55c0..76cd2ce2edf 100644
--- a/package.json
+++ b/package.json
@@ -73,7 +73,7 @@
     "cancelable-promise": "^4.3.1",
     "clipboard": "^2.0.11",
     "color": "^5.0.3",
-    "core-js": "^3.48.0",
+    "core-js": "^3.49.0",
     "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
     "debounce": "^2.2.0",
     "dompurify": "^3.3.3",