[Snyk] Upgrade node-fetch from 3.1.1 to 3.2.0 #82
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade node-fetch from 3.1.1 to 3.2.0. See this package in npm: https://www.npmjs.com/package/node-fetch See this project in Snyk: https://app.snyk.io/org/gurylev/project/2530a2eb-03ce-498f-bf14-7de5b3324af6?utm_source=github&utm_medium=referral&page=upgrade-pr
|
This pull request is being automatically deployed with Vercel (learn more). 🔍 Inspect: https://vercel.com/fogrew/gurylev/8Vzh3jgnmh2JEPxESTcfEQKjaJCP |
Bug Fixes
ContributorsCommit-Lint commandsYou can trigger Commit-Lint actions by commenting on this PR:
|
Deploying with
|
| Latest commit: |
d1fc635
|
| Status: | 🚫 Build failed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade node-fetch from 3.1.1 to 3.2.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: node-fetch
-
3.2.0 - 2022-01-20
- export Blob, File and FormData + utilities (#1463) (81b1378)
-
3.1.1 - 2022-01-16
- core: update fetch-blob by @ jimmywarting in #1371
- docs: Fix typo around sending a file by @ jimmywarting in #1381
- core: (http.request): Cast URL to string before sending it to NodeJS core by @ jimmywarting in #1378
- core: handle errors from the request body stream by @ mdmitry01 in #1392
- core: Better handle wrong redirect header in a response by @ tasinet in #1387
- core: Don't use buffer to make a blob by @ jimmywarting in #1402
- docs: update readme for TS @ types/node-fetch by @ adamellsworth in #1405
- core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @ maxshirshin in #1369
- core: Don't use global buffer by @ jimmywarting in #1422
- ci: fix main branch by @ dnalborczyk in #1429
- core: use more node: protocol imports by @ dnalborczyk in #1428
- core: Warn when using data by @ jimmywarting in #1421
- docs: Create SECURITY.md by @ JamieSlome in #1445
- core: don't forward secure headers to 3th party by @ jimmywarting in #1449
- @ mdmitry01 made their first contribution in #1392
- @ tasinet made their first contribution in #1387
- @ adamellsworth made their first contribution in #1405
- @ maxshirshin made their first contribution in #1369
- @ JamieSlome made their first contribution in #1445
from node-fetch GitHub release notes3.2.0 (2022-01-20)
Features
Security patch release
Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred
What's Changed
New Contributors
Full Changelog: v3.1.0...v3.1.1
Commit messages
Package name: node-fetch
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs