[Snyk] Upgrade node-fetch from 2.6.0 to 2.6.6

[snyk-bot]

Snyk has created this PR to upgrade node-fetch from 2.6.0 to 2.6.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2021-10-31.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service SNYK-JS-NODEFETCH-674311	520/1000 Why? Has a fix available, CVSS 5.9	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: node-fetch

• 2.6.6 - 2021-10-31
  

  What's Changed

  • fix(URL): prefer built in URL version when available and fallback to whatwg by @ jimmywarting in #1352

  Full Changelog: v2.6.5...v2.6.6

• 2.6.5 - 2021-09-22
  

  • fix: import whatwg-url in a way compatible with ESM Node

  • release: 2.6.5

• 2.6.4 - 2021-09-21
• 2.6.3 - 2021-09-20
  
  • fix: properly encode url with unicode characters
  • release: 2.6.3
• 2.6.2 - 2021-09-06
  

  fixed main path in package.json

• 2.6.1 - 2020-09-05
  

  This is an important security release. It is strongly recommended to update as soon as possible.

  See CHANGELOG for details.

• 2.6.0 - 2019-05-16

from node-fetch GitHub release notes

Commit messages

Package name: node-fetch

• f56b0c6 fix(URL): prefer built in URL version when available and fallback to whatwg (hugo production-build is broken open-policy-agent/opa#1352)
• b5417ae fix: import whatwg-url in a way compatible with ESM Node (net.cidr_contains evaluates incorrectly open-policy-agent/opa#1303)
• 18193c5 fix v2.6.3 that did not sending query params (Fix documentation loading script open-policy-agent/opa#1301)
• ace7536 fix: properly encode url with unicode characters (Add support for graceful shutdown of OPA server open-policy-agent/opa#1291)
• 152214c Fix(package.json): Corrected main file path in package.json (Introduce automation to help GC GitHub issues open-policy-agent/opa#1274)
• b5e2e41 update version number
• 2358a6c Honor the `size` option after following a redirect and revert data uri support
• 8c197f8 docs: Fix typos and grammatical errors in README.md (Fixing un-versioned example (data/system) open-policy-agent/opa#686)
• 1e99050 fix: Change error message thrown with redirect mode set to error (partial eval: cover comprehensions that do not depend on unknowns open-policy-agent/opa#653)
• 244e6f6 docs: Show backers in README
• 6a5d192 fix: Properly parse meta tag when parameters are reversed (Add reference to CNCF open-policy-agent/opa#682)
• 47a24a0 chore: Add opencollective badge
• 7b13662 chore: Add funding link
• 5535c2e fix: Check for global.fetch before binding it (Website and documentation improvements open-policy-agent/opa#674)
• 1d5778a docs: Add Discord badge
• eb3a572 feat: Data URI support (Surface tracing notes to users via API open-policy-agent/opa#659)
• 086be6f Remove --save option as it isn't required anymore (Add support for call terms open-policy-agent/opa#581)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs