Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency node-fetch to v2 [SECURITY] #114

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update dependency node-fetch to v2 [SECURITY] #114

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 23, 2022 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
node-fetch ^1.3.0 -> ^2.6.7 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-0235

node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site.

Release Notes

node-fetch/node-fetch (node-fetch)

v2.6.7

Compare Source

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

Full Changelog: node-fetch/node-fetch@v2.6.6...v2.6.7

v2.6.6

Compare Source

What's Changed

Full Changelog: node-fetch/node-fetch@v2.6.5...v2.6.6

v2.6.5

Compare Source

v2.6.4

Compare Source

v2.6.3

Compare Source

v2.6.2

Compare Source

fixed main path in package.json

v2.6.1

Compare Source

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

v2.6.0

Compare Source

See CHANGELOG.

v2.5.0

Compare Source

See CHANGELOG.

v2.4.1

Compare Source

See CHANGELOG.

v2.4.0

Compare Source

See CHANGELOG.

v2.3.0

Compare Source

See CHANGELOG.

v2.2.1

Compare Source

See CHANGELOG.

v2.2.0

Compare Source

v2.1.2: Version 2.1.2

Compare Source

  • Fix: allow Body methods to work on ArrayBuffer-backed Body` objects
  • Fix: reject promise returned by Body methods when the accumulated Buffer exceeds the maximum size
  • Fix: support custom Host headers with any casing
  • Fix: support importing fetch() from TypeScript in browser.js
  • Fix: handle the redirect response body properly

See CHANGELOG.

v2.1.1: Version 2.1.1

Compare Source

See CHANGELOG.

Fix packaging errors in version 2.1.0.

v2.1.0: Version 2.1.0

Compare Source

See CHANGELOG:

  • Enhance: allow using ArrayBuffer as the body of a fetch() or Request
  • Fix: store HTTP headers of a Headers object internally with the given case, for compatibility with older servers that incorrectly treated header names in a case-sensitive manner
  • Fix: silently ignore invalid HTTP headers
  • Fix: handle HTTP redirect responses without a Location header just like non-redirect responses
  • Fix: include bodies when following a redirection when appropriate

v2.0.0: Version 2.0.0

Compare Source

This is a major release. See upgrade guide on how to upgrade from v1.x, and the changelog for all changes.

v1.7.3

Compare Source

This is a backport maintenance release, see changelog for details

v1.7.2

Compare Source

This is a backport maintenance release, see changelog for details

v1.7.1

Compare Source

This is a backport maintenance release, see changelog for details

v1.7.0

Compare Source

This is a backport maintenance release, see changelog for details

v1.6.3

Compare Source

see changelog for details

v1.6.2

Compare Source

see changelog for details

v1.6.1

Compare Source

see changelog for details

v1.6.0

Compare Source

see changelog for details

v1.5.3

Compare Source

see changelog for details

v1.5.2

Compare Source

see changelog for details

v1.5.1

Compare Source

see changelog for details

v1.5.0

Compare Source

see changelog for details

v1.4.1

Compare Source

see changelog for details

v1.4.0

Compare Source

see changelog for details

v1.3.3

Compare Source

v1.3.2

Compare Source

v1.3.1

Compare Source

Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Stockholm, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Mar 25, 2023
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Apr 3, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from d9e7057 to bf0c21b Compare April 3, 2023 09:18
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Apr 3, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from bf0c21b to af90069 Compare April 3, 2023 11:35
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Apr 17, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from af90069 to 332ad3d Compare April 17, 2023 10:46
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Apr 17, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 332ad3d to 7122c6f Compare April 17, 2023 14:54
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 7122c6f to 87ca981 Compare May 15, 2023 19:34
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] May 15, 2023
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] May 15, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch 2 times, most recently from 4be412b to 4b52798 Compare May 16, 2023 06:51
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] May 16, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 4b52798 to 9b21870 Compare May 16, 2023 12:09
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] May 16, 2023
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] May 20, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch 2 times, most recently from 6325474 to c27993d Compare May 20, 2023 11:13
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] May 20, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from c27993d to 7ccfb6f Compare May 20, 2023 16:59
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] May 20, 2023
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] May 20, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch 2 times, most recently from eaa4d17 to bba8fae Compare May 26, 2023 09:01
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] May 26, 2023
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] May 26, 2023
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from bba8fae to e210d29 Compare May 26, 2023 19:47
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] May 29, 2023
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Jul 14, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 2a862ce to 78b28a9 Compare July 21, 2024 14:12
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Jul 21, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 78b28a9 to b4c3f81 Compare July 21, 2024 17:43
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Jul 21, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from b4c3f81 to ee2eaa1 Compare July 28, 2024 13:38
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Jul 28, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from ee2eaa1 to 45a8c2a Compare July 28, 2024 15:52
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Jul 28, 2024
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Oct 9, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch 2 times, most recently from 352545a to fdd47eb Compare October 9, 2024 12:06
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Oct 9, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from fdd47eb to 3d08f13 Compare October 28, 2024 14:41
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Oct 28, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 3d08f13 to 84a5139 Compare October 28, 2024 16:34
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Oct 28, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 84a5139 to c4ef43a Compare December 2, 2024 11:47
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Dec 2, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from c4ef43a to 26579f6 Compare December 2, 2024 14:08
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Dec 2, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 26579f6 to c01d5f9 Compare December 17, 2024 23:28
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Dec 17, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from c01d5f9 to 3201d37 Compare December 18, 2024 02:01
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Dec 18, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from 3201d37 to b680cfc Compare December 22, 2024 16:16
@renovate renovate bot changed the title Update dependency node-fetch to v2 [SECURITY] Update dependency node-fetch to v3 [SECURITY] Dec 22, 2024
@renovate renovate bot changed the title Update dependency node-fetch to v3 [SECURITY] Update dependency node-fetch to v2 [SECURITY] Dec 22, 2024
@renovate renovate bot force-pushed the renovate/npm-node-fetch-vulnerability branch from b680cfc to 82f748e Compare December 22, 2024 19:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants