fix(scan): Strip IE5-8 setImmediate polyfill from core-js and pdfmake

core-js's internals/task.js contains a feature-detection fallback for
IE5-8 that uses document.createElement('script') with onreadystatechange
to schedule microtasks. The branch is unreachable in Obsidian's Electron
runtime (MessageChannel hits an earlier branch in the same chain), so
the four bundled createElement('script') sites (two in core-js, two in
pdfmake's bundled copy of core-js) are dead code flagged at error
severity by the Community automated review.

New postinstall patch removes the IE8- branch from both files at source
so it never reaches main.js. Drops the bundled createElement("script")
count from 4 to 0.

eslint.config.mjs

@@ -16,6 +16,7 @@ export default [
 			"build-fonts.js",
 			"patch-family-chart.js",
 			"patch-leaflet-distortable.js",
+			"patch-core-js-polyfill.js",
 			"gedcom-testing/**",
 			"mockups/**",
 			"tests/fixtures/**",

package.json

@@ -18,7 +18,7 @@
 		"format:css": "prettier --write \"styles/**/*.css\"",
 		"deploy": "./deploy.sh",
 		"dev:deploy": "./dev-deploy.sh",
-		"postinstall": "node patch-family-chart.js && node patch-leaflet-distortable.js",
+		"postinstall": "node patch-family-chart.js && node patch-leaflet-distortable.js && node patch-core-js-polyfill.js",
 		"test": "node ./node_modules/vitest/vitest.mjs run",
 		"test:watch": "node ./node_modules/vitest/vitest.mjs"
 	},

patch-core-js-polyfill.js

@@ -0,0 +1,78 @@
+/**
+ * Postinstall patch: remove the IE5-8 setImmediate polyfill branch from
+ * core-js (and pdfmake's bundled copy of core-js).
+ *
+ * core-js's `internals/task.js` contains a feature-detection fallback for
+ * IE5-8 that uses `document.createElement('script')` with `onreadystatechange`
+ * to schedule microtasks. The branch is unreachable in Obsidian's Electron
+ * runtime (`MessageChannel` is always available, satisfying an earlier
+ * branch in the same chain), so the `createElement('script')` line is
+ * dead code in our bundle.
+ *
+ * Obsidian's Community automated review flags this `<script>` element
+ * creation at error severity under its "dynamic `<script>` element
+ * creations" rule. The same polyfill code is also bundled inside pdfmake's
+ * dist file (pdfmake ships its own copy of core-js), producing two
+ * additional flagged sites.
+ *
+ * Removing the unreachable IE8- branch at the source eliminates the four
+ * sites from the bundled main.js. The remaining setImmediate behavior is
+ * unchanged: the earlier MessageChannel branch handles all Electron paths,
+ * and the trailing `setTimeout` fallback handles anything that misses.
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+const TARGETS = [
+	path.join(__dirname, 'node_modules', 'core-js', 'internals', 'task.js'),
+	path.join(__dirname, 'node_modules', 'pdfmake', 'build', 'pdfmake.js'),
+];
+
+const ORIGINAL = `  // IE8-
+  } else if (ONREADYSTATECHANGE in createElement('script')) {
+    defer = function (id) {
+      html.appendChild(createElement('script'))[ONREADYSTATECHANGE] = function () {
+        html.removeChild(this);
+        run(id);
+      };
+    };
+  // Rest old browsers
+  } else {`;
+
+const PATCHED = `  // IE8- polyfill branch removed by Charted Roots postinstall patch:
+  // unreachable in Obsidian's Electron runtime (MessageChannel hits an
+  // earlier branch) and flagged by the Community automated review's
+  // "dynamic <script> element creations" rule.
+  // Rest old browsers
+  } else {`;
+
+const MARKER = 'IE8- polyfill branch removed by Charted Roots postinstall patch';
+
+for (const target of TARGETS) {
+	const label = `[patch-core-js-polyfill] ${path.relative(__dirname, target)}`;
+
+	if (!fs.existsSync(target)) {
+		console.log(`${label}: File not found, skipping.`);
+		continue;
+	}
+
+	let source = fs.readFileSync(target, 'utf8');
+
+	if (source.includes(MARKER)) {
+		console.log(`${label}: Already patched, skipping.`);
+		continue;
+	}
+
+	if (!source.includes(ORIGINAL)) {
+		console.warn(
+			`${label}: Could not find expected IE8- polyfill block. ` +
+				'The bundled library may have been updated. Skipping patch.'
+		);
+		continue;
+	}
+
+	source = source.replace(ORIGINAL, PATCHED);
+	fs.writeFileSync(target, source, 'utf8');
+	console.log(`${label}: Removed IE8- setImmediate polyfill branch.`);
+}