Remove "request" dependency due to security vulnerability? CVE-2023-28155

[justin-wilxite]

The dependency "request" has a security vulnerability (reported by npm audit):

GHSA-p8p7-x288-28g6

The "request" library itself is deprecated:

request/request#3142

There is a PR on the project to fix the vulnerability, but it looks like it will not be merged:

request/request#3444

[Eskotus]

Looks like it's not even used in the repository. Was it just forgotten in the deps?

[dan-j]

Looks like this was addressed here: #60

Just needs a release cutting from main. Is there a plan to do this soon?

[aeneasr]

Thank you for letting us know - release is triggerd! Closing issue

[aeneasr]

Looks like tests are failing: https://github.com/ory/integrations/actions/runs/8434909650/job/23099169259

Would appreciate help fixing the issues!

[dan-j]

Tests pass locally on node 21, GitHub Actions are on 17.. do you want to upgrade, or fix the test on 17?

[dan-j]

The version of next used on main requires >=18.17.0, if that helps answer your question? I've confirmed that tests pass on v18.19.1