fix(deps): update dependency normalize-url to v8

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
normalize-url	^4.0.0 -> ^8.0.0

---

Release Notes

sindresorhus/normalize-url (normalize-url)

v8.0.0

Compare Source

Breaking

• Require Node.js 14 52f2290
• Ignore URLs with custom protocols and just pass them through (#​178) 882cb84
  • By default, these protocols are supported: https, http, file, data.
  • If you need support for a custom protocol that behaves like a HTTP URL, see https://github.com/sindresorhus/normalize-url/issues/179.
• ftp protocol is no longer normalized. It's just passed through.
• Human-friendly URLs with basic auth is no longer handled as it conflicts with custom protocols
  • Example: user:password@sindresorhus.com

Improvements

• Make defaultProtocol option accept protocol without colon c7fd781
  • You can still pass in a protocol with colon. However, if you use TypeScript, it enforces it without.

v7.2.0

Compare Source

• Add removeExplicitPort option (#​174) 192223b

v7.1.0

Compare Source

• Add keepQueryParameters option (#​173) 6e24307

v7.0.3

Compare Source

• Fix encoding consistency with sorted and non-sorted URL parameters (#​158) c42f53b

v7.0.2

Compare Source

• Fix the removeDirectoryIndex option TypeScript type 4d35ea1

v7.0.1

Compare Source

• Fix Safari compatibility (#​148) d51cb50

v7.0.0

Compare Source

Breaking

• Require Node.js 12.20 (#​138) 9a44d07
• This package is now pure ESM. Please read this.

v6.1.0

Compare Source

• Accept a boolean for the removeQueryParameters option (#​136) 6216336

v6.0.1

Compare Source

• Fix ReDoS vulnerability for data URLs b1fdb51
  • CVE-2021-33502

Also fixed for v5 in 5.3.1 and for v4 in 4.5.1. Versions below 4.3.0 are not affected by this.

v6.0.0

Compare Source

Breaking

• Add stripTextFragment option (#​130) 01a4a91
  It should not affect most use-cases, but it is turned on by default and it does change the URL slightly, so it's marked as breaking just to be safe.

v5.3.1

Compare Source

v5.3.0

Compare Source

• Throw a friendly error on view-source: input (#​124) ddf2584

v5.2.1

Compare Source

• Fix removeSingleSlash option adding slashes (#​122) 1e06753

v5.2.0

Compare Source

• Add removeSingleSlash option (#​120) 18effbe

v5.1.0

Compare Source

• Improve stripWWW logic (#​117) 0ee9d94
• Allow any protocol in the duplicate slashes normalization (#​115) 14b79c6

v5.0.0

Compare Source

Note that if you're using normalize-url in the browser, you should probably stay on v4 as this version uses newer syntax not available in all browsers.

Breaking

• Require Node.js 10 (#​103) 7b4ad64

Breaking for TypeScript users

• Only use a CommonJS export for the TypeScript definition
  You need to change import normalizeUrl from 'normalize-url'; to import normalizeUrl = require('normalize-url');

Fixes

• Don't throw if decoding the path fails (#​104) 062b426

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.