[Snyk] Upgrade node-fetch from 2.6.1 to 3.0.0 #111

snyk-bot · 2021-09-08T00:30:25Z

Snyk has created this PR to upgrade node-fetch from 2.6.1 to 3.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 13 versions ahead of your current version.
The recommended version was released 7 days ago, on 2021-08-31.

Release notes

Package name: node-fetch

3.0.0 - 2021-08-31
version 3 is going out of a long beta period and switches to stable

One major change is that it's now a ESM only package
See changelog for more information about all the changes.
3.0.0-beta.6-exportfix - 2020-05-25
See CHANGELOG for details.
3.0.0-beta.10 - 2021-07-19
This package is now a ESM only package. To import fetch you either have to use

import fetch from 'node-fetch';

// Or if you are still using commonjs or want to lazy
// import fetch then the async import works fine
import('node-fetch')
- res.blob().stream() now returns a whatwg ReadableStream instad
See CHANGELOG for details.
3.0.0-beta.9 - 2020-09-05
This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.
3.0.0-beta.8 - 2020-08-10
See CHANGELOG for details.
3.0.0-beta.7 - 2020-06-11
See CHANGELOG for details.
3.0.0-beta.6 - 2020-05-25
See CHANGELOG for details.
3.0.0-beta.5 - 2020-04-22
See CHANGELOG for details.
3.0.0-beta.4 - 2020-03-14
3.0.0-beta.3 - 2020-03-13
3.0.0-beta.2 - 2020-03-13
3.0.0-beta.1 - 2020-03-13
2.6.2 - 2021-09-06
2.6.1 - 2020-09-05
This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

from node-fetch GitHub release notes

Commit messages

Package name: node-fetch

d6e23a2 Merge branch 'main' of github.com:node-fetch/node-fetch
2603c67 V3 stable release (#1257)
7077dae making v3 stable
2f1b426 docs: Add example for loading ESM from CommonJS (#1236)
51861e9 Fix(premature close) Redirect failing when response is chunked but empty (#1222)
136a5f1 Add link to v2 docs (#1202)
b50fbc1 Require Node.js 12.20.0 and move to ESM (#1141)
ffef5e3 Fix `this` arg for URLSearchParams prototype call (#1111)
694b11a Upgrade to GitHub-native Dependabot (#1139)
3b50b0c Add support for Response.error() (#1078)
1780f5a fix: Add missing insecureHTTPParser in RequestInit interface (#964)
9e50c5b Update README.md (#1112)
d8fc32d Fully test both AbortController implementations, Bump abortcontroller-polyfill to 1.7.1 (#1065)
f2ff9ec Test empty status text (#1069)
8eeeec1 Fix premature close with chunked transfer encoding and for async iterators in Node 12 (#1064)
6ee9d31 Improve Header's forEach method compliance with browser implementation. (#1074)
e333578 fix formdata-node example (#1068)
1c30aec Removing confusingly named 'json' variable in examples (#1073)
4abbfd2 Test custom inspect function for `Header` (#1017)
cb032ea Throw a `TypeError` on an invalid redirect option (#1019)
5c657e7 Fix missing return after reject (#1022)
1f4f85e Support instances of `EventTarget` as a `signal` (#1001)
c868862 Allow `signal` to be `null` or `undefined` (#1050)
d016690 Fix indent (#1043)