fix(deps): update dependency cross-fetch to v3.1.5 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cross-fetch	3.1.4 -> 3.1.5

GitHub Vulnerability Alerts

CVE-2022-1365

When fetching a remote url with Cookie if it get Location response header then it will follow that url and try to fetch that url with provided cookie . So cookie is leaked here to thirdparty.
Ex: you try to fetch example.com with cookie and if it get redirect url to attacker.com then it fetch that redirect url with provided cookie .

---

Release Notes

lquixada/cross-fetch (cross-fetch)

v3.1.5

Compare Source

What's Changed

• chore: updated node-fetch version to 2.6.7 by @​dlafreniere in https://github.com/lquixada/cross-fetch/pull/124

New Contributors

• @​dlafreniere made their first contribution in https://github.com/lquixada/cross-fetch/pull/124

Full Changelog: lquixada/cross-fetch@v3.1.4...v3.1.5

---

Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

[socket-security]

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/helper-validator-identifier@7.22.20	None	0	49.1 kB	nicolo-ribaudo
npm/@babel/runtime@7.16.7	None	0	148 kB	nicolo-ribaudo
npm/cross-fetch@3.1.8	network	0	75.1 kB	lquixada
npm/graceful-fs@4.2.11	environment, filesystem	0	32.5 kB	isaacs
npm/node-fetch@2.7.0	network	0	162 kB	node-fetch-bot
npm/tr46@0.0.3	None	0	268 kB	sebmaster
npm/webidl-conversions@3.0.1	None	0	12.4 kB	sebmaster
npm/whatwg-url@5.0.0	None	0	49.9 kB	domenic

🚮 Removed packages: npm/@babel/helper-validator-identifier@7.16.7, npm/@babel/runtime@7.15.3, npm/cross-fetch@3.1.4, npm/graceful-fs@4.2.6, npm/lodash.sortby@4.7.0, npm/node-fetch@2.6.1, npm/tr46@1.0.1, npm/webidl-conversions@4.0.2, npm/whatwg-url@7.1.0

View full report↗︎

[sonarcloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud