[Snyk] Upgrade node-fetch from 2.6.7 to 3.2.4

[tlawrie]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade node-fetch from 2.6.7 to 3.2.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 19 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-04-28.

Release notes

Package name: node-fetch

• 3.2.4 - 2022-04-28
  

  3.2.4 (2022-04-28)

  Bug Fixes

  • don't uppercase unknown methods (#1542) (004b3ac)
• 3.2.3 - 2022-03-11
  

  3.2.3 (2022-03-11)

  Bug Fixes

  • handle bom in text and json (#1482) (6425e20)
• 3.2.2 - 2022-03-07
  

  3.2.2 (2022-03-07)

  Bug Fixes

  • add missing formdata export to types (#1518) (a4ea5f9), closes #1517
• 3.2.1 - 2022-03-01
  

  3.2.1 (2022-03-01)

  Bug Fixes

  • cancel request example import (#1513) (61b3b5a)
• 3.2.0 - 2022-01-20
  

  3.2.0 (2022-01-20)

  Features

  • export Blob, File and FormData + utilities (#1463) (81b1378)
• 3.1.1 - 2022-01-16
  

  Security patch release

  Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

  What's Changed

  • core: update fetch-blob by @ jimmywarting in #1371
  • docs: Fix typo around sending a file by @ jimmywarting in #1381
  • core: (http.request): Cast URL to string before sending it to NodeJS core by @ jimmywarting in #1378
  • core: handle errors from the request body stream by @ mdmitry01 in #1392
  • core: Better handle wrong redirect header in a response by @ tasinet in #1387
  • core: Don't use buffer to make a blob by @ jimmywarting in #1402
  • docs: update readme for TS @ types/node-fetch by @ adamellsworth in #1405
  • core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @ maxshirshin in #1369
  • core: Don't use global buffer by @ jimmywarting in #1422
  • ci: fix main branch by @ dnalborczyk in #1429
  • core: use more node: protocol imports by @ dnalborczyk in #1428
  • core: Warn when using data by @ jimmywarting in #1421
  • docs: Create SECURITY.md by @ JamieSlome in #1445
  • core: don't forward secure headers to 3th party by @ jimmywarting in #1449

  New Contributors

  • @ mdmitry01 made their first contribution in #1392
  • @ tasinet made their first contribution in #1387
  • @ adamellsworth made their first contribution in #1405
  • @ maxshirshin made their first contribution in #1369
  • @ JamieSlome made their first contribution in #1445

  Full Changelog: v3.1.0...v3.1.1

• 3.1.0 - 2021-11-08
• 3.0.0 - 2021-08-31
• 3.0.0-beta.6-exportfix - 2020-05-25
• 3.0.0-beta.10 - 2021-07-19
• 3.0.0-beta.9 - 2020-09-05
• 3.0.0-beta.8 - 2020-08-10
• 3.0.0-beta.7 - 2020-06-11
• 3.0.0-beta.6 - 2020-05-25
• 3.0.0-beta.5 - 2020-04-22
• 3.0.0-beta.4 - 2020-03-14
• 3.0.0-beta.3 - 2020-03-13
• 3.0.0-beta.2 - 2020-03-13
• 3.0.0-beta.1 - 2020-03-13
• 2.6.7 - 2022-01-16

from node-fetch GitHub release notes

Commit messages

Package name: node-fetch

• 004b3ac fix: don't uppercase unknown methods (#1542)
• c33e393 Fix Code of Conduct link in Readme. (#1532)
• 6875205 docs: Fix link markup to Options definition (#1525)
• 6425e20 fix: handle bom in text and json (#1482)
• a4ea5f9 fix: add missing formdata export to types (#1518)
• 61b3b5a fix: cancel request example import (#1513)
• 5e78af3 Replace changelog with valid url (#1506)
• 9014db7 types: support `agent: false` (#1502)
• 2e1f3a5 chore: fix typo in credential error message (#1496)
• 4ce2ce5 docs(readme): fix typo (#1489)
• ba23fd2 docs: remove the changelog (#1464)
• 8fedc1b core: move support and feature to discussion (#1471)
• 0b43b9f docs: update formdata example (#1465)
• 81b1378 feat: export Blob, File and FormData + utilities (#1463)
• b2f5d8d ci: semantic-release (#1270)
• 015798e test: Modernize and convert some test in `main.js` to async/await (#1456)
• 1028f83 test: Update major busboy version (#1457)
• dd2cea4 Handle zero-length OK deflate responses (master) (#965)
• 92dee09 Simplify check in isDomainOrSubdomain (#1455)
• 36e47e8 3.1.1 release (#1451)
• 5304f3f Don't change relative location header on manual redirect (#1105)
• f5d3cf5 fix(Headers): don't forward secure headers to 3th party (#1449)
• f2c3d56 Create SECURITY.md (#1445)
• 4ae3538 core: Warn when using data (#1421)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs