Update dependency node-fetch to v2 [SECURITY] #3

renovate · 2021-08-25T16:33:55Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
node-fetch	`^1.5.3` -> `^2.6.7`
node-fetch	`^1.5.1` -> `^2.6.7`

GitHub Vulnerability Alerts

CVE-2022-0235

node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site.

Release Notes

node-fetch/node-fetch (node-fetch)

`v2.6.7`

Compare Source

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

fix: don't forward secure headers to 3th party by @jimmywarting in https://github.com/node-fetch/node-fetch/pull/1453

Full Changelog: node-fetch/node-fetch@v2.6.6...v2.6.7

`v2.6.6`

Compare Source

What's Changed

fix(URL): prefer built in URL version when available and fallback to whatwg by @jimmywarting in https://github.com/node-fetch/node-fetch/pull/1352

Full Changelog: node-fetch/node-fetch@v2.6.5...v2.6.6

fixed main path in package.json

`v2.6.1`

Compare Source

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

`v2.6.0`

Compare Source

See CHANGELOG.

`v2.5.0`

Compare Source

See CHANGELOG.

`v2.4.1`

Compare Source

See CHANGELOG.

`v2.4.0`

Compare Source

See CHANGELOG.

`v2.3.0`

Compare Source

See CHANGELOG.

`v2.2.1`

Compare Source

See CHANGELOG.

`v2.2.0`

Compare Source

`v2.1.2`: Version 2.1.2

Compare Source

Fix: allow Body methods to work on ArrayBuffer-backed Body` objects
Fix: reject promise returned by Body methods when the accumulated Buffer exceeds the maximum size
Fix: support custom Host headers with any casing
Fix: support importing fetch() from TypeScript in browser.js
Fix: handle the redirect response body properly

See CHANGELOG.

`v2.1.1`: Version 2.1.1

Compare Source

See CHANGELOG.

Fix packaging errors in version 2.1.0.

`v2.1.0`: Version 2.1.0

Compare Source

See CHANGELOG:

Enhance: allow using ArrayBuffer as the body of a fetch() or Request
Fix: store HTTP headers of a Headers object internally with the given case, for compatibility with older servers that incorrectly treated header names in a case-sensitive manner
Fix: silently ignore invalid HTTP headers
Fix: handle HTTP redirect responses without a Location header just like non-redirect responses
Fix: include bodies when following a redirection when appropriate

`v2.0.0`: Version 2.0.0

Compare Source

This is a major release. See upgrade guide on how to upgrade from v1.x, and the changelog for all changes.

`v1.7.3`

Compare Source

This is a backport maintenance release, see changelog for details

`v1.7.2`

Compare Source

This is a backport maintenance release, see changelog for details

`v1.7.1`

Compare Source

This is a backport maintenance release, see changelog for details

`v1.7.0`

Compare Source

This is a backport maintenance release, see changelog for details

`v1.6.3`

Compare Source

see changelog for details

`v1.6.2`

Compare Source

see changelog for details

`v1.6.1`

Compare Source

see changelog for details

`v1.6.0`

Compare Source

see changelog for details

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from b191994 to 057c904 Compare August 25, 2021 18:26

renovate bot changed the title ~~Update dependency node-fetch [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Aug 25, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 057c904 to 3da413a Compare August 30, 2021 09:35

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch [SECURITY] Aug 30, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 3da413a to 4b5c1a8 Compare August 30, 2021 13:19

renovate bot changed the title ~~Update dependency node-fetch [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Aug 30, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 4b5c1a8 to fee91c3 Compare September 6, 2021 10:11

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch [SECURITY] Sep 6, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from fee91c3 to 2e0b2a0 Compare September 6, 2021 11:43

renovate bot changed the title ~~Update dependency node-fetch [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Sep 6, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 2e0b2a0 to 25bc727 Compare September 9, 2021 08:58

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch [SECURITY] Sep 9, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 25bc727 to a65b027 Compare September 9, 2021 10:22

renovate bot changed the title ~~Update dependency node-fetch [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Sep 9, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from a65b027 to 4d17e6e Compare September 9, 2021 11:45

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch [SECURITY] Sep 9, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 4d17e6e to d541cd9 Compare September 9, 2021 13:16

renovate bot changed the title ~~Update dependency node-fetch [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Sep 9, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from d541cd9 to c02f8f5 Compare September 13, 2021 08:44

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch [SECURITY] Sep 13, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from c02f8f5 to dfe0fb4 Compare September 13, 2021 10:44

renovate bot changed the title ~~Update dependency node-fetch [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Sep 13, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from dfe0fb4 to 0eee93e Compare September 16, 2021 13:00

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch [SECURITY] Sep 16, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 0eee93e to 1f90ca8 Compare September 16, 2021 14:29

renovate bot changed the title ~~Update dependency node-fetch [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Sep 16, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 1f90ca8 to ca810a4 Compare September 22, 2021 11:58

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch [SECURITY] Sep 22, 2021

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from ca810a4 to 37a6a54 Compare September 22, 2021 12:36

renovate bot changed the title ~~Update dependency node-fetch [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Sep 22, 2021

renovate bot changed the title ~~Update dependency node-fetch to v3 [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Apr 27, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from a083c9c to ff72e51 Compare May 1, 2024 08:48

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch to v3 [SECURITY] May 1, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from ff72e51 to e198f8f Compare May 2, 2024 08:27

renovate bot changed the title ~~Update dependency node-fetch to v3 [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] May 2, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from e198f8f to 01dfd6c Compare May 11, 2024 23:36

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch to v3 [SECURITY] May 11, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 01dfd6c to b872260 Compare May 12, 2024 11:40

renovate bot changed the title ~~Update dependency node-fetch to v3 [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] May 12, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from b872260 to aff8976 Compare May 22, 2024 21:00

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch to v3 [SECURITY] May 22, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from aff8976 to c194e8f Compare May 23, 2024 11:49

renovate bot changed the title ~~Update dependency node-fetch to v3 [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] May 23, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from c194e8f to 4d4d02d Compare June 5, 2024 08:36

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch to v3 [SECURITY] Jun 5, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 4d4d02d to 5332256 Compare June 6, 2024 02:48

renovate bot changed the title ~~Update dependency node-fetch to v3 [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Jun 6, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 5332256 to e192359 Compare June 28, 2024 08:47

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch to v3 [SECURITY] Jun 28, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from e192359 to 58dc44e Compare June 29, 2024 11:54

renovate bot changed the title ~~Update dependency node-fetch to v3 [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Jun 29, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 58dc44e to e9031b6 Compare July 15, 2024 02:26

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch to v3 [SECURITY] Jul 15, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from e9031b6 to 51f06a0 Compare July 23, 2024 23:46

renovate bot changed the title ~~Update dependency node-fetch to v3 [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Jul 23, 2024

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 51f06a0 to 7ed72c5 Compare July 29, 2024 08:42

renovate bot changed the title ~~Update dependency node-fetch to v2 [SECURITY]~~ Update dependency node-fetch to v3 [SECURITY] Jul 29, 2024

Update dependency node-fetch to v2 [SECURITY]

ba2d684

renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 7ed72c5 to ba2d684 Compare July 30, 2024 05:29

renovate bot changed the title ~~Update dependency node-fetch to v3 [SECURITY]~~ Update dependency node-fetch to v2 [SECURITY] Jul 30, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency node-fetch to v2 [SECURITY] #3

Update dependency node-fetch to v2 [SECURITY] #3

renovate bot commented Aug 25, 2021 •

edited

Loading

Update dependency node-fetch to v2 [SECURITY] #3

Are you sure you want to change the base?

Update dependency node-fetch to v2 [SECURITY] #3

Conversation

renovate bot commented Aug 25, 2021 • edited Loading

GitHub Vulnerability Alerts

Release Notes

Security patch release

What's Changed

What's Changed

v2.1.2: Version 2.1.2

v2.1.1: Version 2.1.1

v2.1.0: Version 2.1.0

v2.0.0: Version 2.0.0

Configuration

renovate bot commented Aug 25, 2021 •

edited

Loading

`v2.1.2`: Version 2.1.2

`v2.1.1`: Version 2.1.1

`v2.1.0`: Version 2.1.0

`v2.0.0`: Version 2.0.0