chore(deps): update devdependencies-major (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node	14.18.12 -> 16.11.26
cypress	8.7.0 -> 9.5.3
dotenv	10.0.0 -> 16.0.0
node-fetch	2.6.7 -> 3.2.3
postcss-cli	8.3.1 -> 9.1.0
tailwindcss (source)	2.2.19 -> 3.0.23

---

Release Notes

cypress-io/cypress

v9.5.3

Compare Source

Released 3/28/2022

Bugfixes:

• Corrected a logging issue with cy.intercept() where the response status code
  and response body were sometimes missing from the log details in open mode.
  Fixed #​18757.
• Fixed an issue in cy.readFile() where the command would not retry or provide
  a meaningful error message if null encoding was used and the file was not
  found. Fixed #​20683.
• Updated the Cypress Keyboard shortcuts to only run the shortcut when the
  pressed shortcut key was not used in conjunction with either the alt,
  ctrl, or shift modifier keys. This fixed an issue where the Cypress
  shortcut handler would override the browser native keyboard shortcut for
  search (ctrl + f). Fixed
  #​20222.
• Updates were made to correctly escape dollar signs in the
  CYPRESS_DOWNLOAD_PATH_TEMPLATE environment variable. Issues were seen
  utilizing this template when the env was provided from a package manager file.
  Fixed #​19914.
• Fix the Cypress.Buffer TypeScript type to reference the static constructor
  of Buffer, instead of incorrectly referencing the Buffer instance which
  caused Type errors. Fixes
  #​20542.

Dependency Updates:

• Upgraded electron dependency from 15.3.4 to 15.3.5 to address the
  CVE-2022-21718 NVD security
  vulnerability. Addressed in
  #​20750.
• Upgraded minimist dependency from 1.2.5 to 1.2.6. Addressed in
  #​20756.
• Upgraded nanoid dependency from 3.1.20 to 3.1.31 to address the
  CVE-2021-23566 NVD security
  vulnerability. Addressed in
  #​20726.
• Upgraded node-forge dependency from 1.0.0 to 1.3.0 to address the
  CVE-2022-24771 NVD security
  vulnerability. Addressed in
  #​20727.

v9.5.2

Compare Source

Released 3/14/2022

Bugfixes:

• Fixed an issue with .type() where click events could be fired on the
  incorrect target element because the target focus changed within a key-down
  event handler callback. Fixed in
  #​20525.
• Fixed a regression in 9.5.0 where ANSI
  colors were not removed from the FireFox warning message about the
  chromeWebSecurity configuration option having no effect on the Firefox
  browser. Fixes #​20496.
• Updates were made to the pre-release build setup such that Cypress will use a
  unique cache folder for each
  pre-release installation
  on a machine. This removes the need to run cypress clear cache before
  installing a new pre-release version of Cypress or before installing a new
  released version of Cypress after a pre-release version had been installed.
  Addressed in #​20296.

Misc:

• Updates were made to explicitly disable the Origin-Agent-Cluster header for
  proxied responses to ensure document.domain can continue to be set with
  Chrome v106+. This was necessary because Chrome is planning to make
  document.domain immutable
  in v106+ to relax the same-origin policy by interpreting the
  Origin-Agent-Cluster as true, whereas it is currently interpreted as
  false. Addresses
  #​20147.

Dependency Updates:

• Upgraded url-parse dependency from 1.5.6 to 1.5.9 to address these NVD
  security vulnerabilities,
  CVE-2022-0639,
  CVE-2022-0686 and
  CVE-2022-0691. Addressed in
  #​20386 and
  #​20439.

v9.5.1

Compare Source

Released 2/28/2022

Bugfixes:

• Added a ready event to the Plugins process to ensure all plugins have
  successfully started before the configuration is loaded and the tests start.
  Fixed in #​19792.
  • This fixes an issue where the plugin is never executed and leaves Cypress
    stuck in the initialization phase, where the user can only view the loading
    spinner.
  • This enables support for node's experimental --loader flag for plugins.
• Made a change to the DNS lookup to improve test performances and reliability
  on MacOS machines that leverage the VMWare CBCloud SaaS solution. Before this
  change, random test failures were observed, as well as hanging tests and
  initially pending HTTP and HTTPS responses. Fixed in
  #​20062.
• Fixed a regression in 9.5.0 where ANSI
  colors were not removed from the cy.fixtures() error code frame. Fixes
  #​20208.
• Fixed a regression in 9.5.0 where the
  test config override errors were formatted incorrectly. Fixes
  #​20208.
• Fixed an issue where Cypress would throw an error when reporting or wrapping
  errors with booleans or numbers. Fixes
  #​19561.

Dependency Updates:

• Upgraded url-parse dependency from 1.5.2 to 1.5.6 to avoid authorization
  bypass through user-controlled key to address this
  NVD security vulnerability.
  Addressed in #​20270.

v9.5.0

Compare Source

Released 2/15/2022

Features:

• Enhancements were made to the error experience in both run mode and open mode
  to improve readability and provide meaningful stack traces. Addressed in
  #​20124.
• Updated the cy.request() log message to hide the origin when it matched the
  browser origin to make debugging easier. This reduces the length of the log
  message that could be partially hidden if a long url is requested. Addressed
  in #​20009.
• Updates were made to log the ShadowRoot and Document elements as HTML
  elements. Previously these would be logged as enumerated objects, which were
  difficult to evaluate. Addressed in
  #​20049.
• Updated the terminal output generated in Cypress run mode to de-emphasis the
  node path in the run header. Addressed in
  #​20120.

Bugfixes:

• Fixed an issue where files attached during .selectFile() could have the
  wrong File prototype. Fixes
  #​20003.
• Updated .select() to only dispatch the change and input events when the
  selected option is not the currently selected option. This change aligns
  .select() with the browser. Fixes
  #​19494.
• Updated .type(' ') to align with the W3C standards where a click event
  should be dispatched when the Space key is pressed and the current focus is on
  a state-changing element with type button, image, submit or reset.
  Fixes #​20067.

v9.4.1

Compare Source

Released 1/31/2022

Bugfixes:

• Fixed a regression in 9.4.0 where the
  line endings in the public NPM package prevented some users from running
  Cypress. Fixes #​19986.

v9.4.0

Compare Source

Released 1/31/2022

Features

• Enhancements were made to .selectFile() after receiving feedback after its
  initial release in 9.3.0.
  • The default behavior was updated to automatically infer the mime type of
    files based on their extension to correctly encode file uploads. Addressed
    in #​19751.
  • Added the mimeType property so you can explicitly set the mime type on
    files using the mimeType property. Addressed in
    #​19751.
  • Updated file contents types to allow either a
    TypedArray
    instance or a Cypress.Buffer instance, where previously file contents were
    expected to only be an instance of Cypress.Buffer. Addressed in
    #​19751.
  • Updated .selectFile() to retain the fileName of files read from disk to
    work with aliases. Addressed in
    #​19803.

Bugfixes:

• Fixed a regression in 9.3.0 to correctly
  parse the --spec CLI parameter for glob patterns containing a range. Fixes
  #​19783.
• Fixed regression in 9.2.1 where the
  --openssl-legacy-provider flag was not being passed to the plugins' child
  process when the user's system Node version was Node 17+ built with OpenSSL
  v3+ which resulted in Cypress crashing when trying to run tests. Fixes
  #​19712.
• Update cy.type('{enter}') to align with the W3C standards where a click
  event should be dispatched when the Enter key is pressed and the current focus
  is on astate-changing element with type button, image, submit or
  reset. Fixes #​19541.

v9.3.1

Compare Source

Released 1/19/2022

Bugfixes:

• Fixed an issue where the bin file was released with windows line breaks. Fixes
  #​19747.

v9.3.0

Compare Source

Released 1/18/2022

Features:

• Added a new Cypress command, called
  .selectFile(), to select a file or files in an
  HTML5 input element or simulate dragging a file or files into the browser. The
  API is similar to cypress-file-upload and we have provided a
  migration guide
  for previous users of that plugin. For more details, see
  our blog post.
  Fixes #​19524 and
  #​170.
• Exposed the Buffer polyfill, as Cypress.Buffer,
  to enable working with binary data. Addressed in
  #​19524.
• Added the CYPRESS_DOWNLOAD_PATH_TEMPLATE environment variable which can be
  set to a string template for building the download URL for the Cypress binary.
  This environment variable is useful for users who are downloading the Cypress
  binary from a proxy that is not one-to-one with the Cypress's default download
  url. More information can be found in the
  Install Binary
  documentation. Fixes
  #​15697.

Bugfixes:

• Fixed an issue where the --spec CLI parameter was not working properly when
  passing multiple glob patterns that are separated by commas. Fixes
  #​16102.
• Fixed an issue with how the CYPRESS_VERIFY_TIMEOUT environment variable was
  read so it can set in a project's package.json or it's .npmrc. Fixes
  #​19559.

Dependency Updates:

• Upgraded graceful-fs from 4.2.0 to 4.2.9. This upgrade resolves issues
  observed with using graceful-fs v4.2.0 with resolve v1.21+. Addressed in
  #​19676 and resolves
  #​19610.
  • NOTE: This upgrade to graceful-fs breaks Cypress's compatibility with
    Yarn 2. We have observed errors with Yarn 2.4.2 with graceful-fs 4.2.9.
    Before this change, Cypress had minimal Yarn 2 support (see
    #​6377). Between Yarn 3
    fixing multiple bugs and the migration path from Yarn 2 to Yarn 3 being
    minimal, we felt the best step forward was to support and recommend Yarn 3
    over Yarn 2.
• Upgraded electron from 15.2.0 to 15.3.4. Addressed in
  #​19351.

v9.2.1

Compare Source

Released 1/10/2022

Bugfixes:

• Fixed a regression in 9.2.0 to keep
  Cypress open after each spec finishes when the --headed --no-exit flags are
  passed to cypress run. Fixes
  #​19485.
• Improve heuristic for verifying when the --openssl-legacy-provider option
  should be passed to the plugins' child process when the system Node version is
  v17+. This prevents Cypress from crashing when a user has Node 17 installed
  which was built with OpenSSL v1. Fixes
  #​19320.
• Correctly cast the CYPRESS_VERIFY_TIMEOUT environment variable as a number
  so Cypress will no longer throw
  TypeError: Expected the timeout option to be a non-negative integer. Fixes
  #​19476.

Dependency Updates:

• Update pinned resolution of cli-table3 from ~0.6.0 to ~0.6.1 to avoid
  problems with the bug introduced in the
  colors.js v1.4.44-liberty-2 release.
  Addresses #​19624.

v9.2.0

Compare Source

Released 12/20/2021

Features:

• Cypress will throw an error when a user attempts to update a configuration
  value at run-time using either the Test Configuration or using
  Cypress.config() that is a
  readonly option.
  Addresses #​6407 and
  #​19001.
• A timeout option has been added to the cy.writeFile() command, with a
  default value of defaultCommandTimeout. Addresses
  #​3350.
• The default maxHttpBufferSize for the internal socket server has been
  increased to
  Node's maximum Buffer size
  (size varies by OS) to allow large file writes with cy.writeFile().
  Addresses #​19140.
• Add CYPRESS_VERIFY_TIMEOUT environment variable to override the timeout
  duration of the verify command. Addresses
  #​18290.

Bugfixes:

• Prevent unnecessary snapshotting when running default assertions that would
  unnecessarily increase CPU use in cypress open mode which lead to out of
  memory crashes on certain browsers. Fixes
  #​18549.
• Removed automatic retries for failed HTTP requests through the proxy. This
  fixes an issue where failed requests could be re-sent too many times in some
  conditions. This change could increase the number of failed requests that your
  app sees. Fixes #​19043.
• Reduced the occurrence of an issue where logs for fetch and xhr requests
  could be associated with the wrong request. Fixes
  #​19043.
• Tests that are skipped within then blocks will no longer throw errors
  causing the test to fail. Tests that are skipped outside of then blocks will
  no longer trigger the fail event. This will prevent screenshots from happening
  from errors thrown by the fail event.Fixes
  #​14867 and
  #​17660.
• Fixed a regression in 9.0.0 where a
  fixture provided in a static response to cy.intercept() did not support
  passing null to encoding to read the fixture as a Buffer. This identified an
  undocumented 9.0.0 Breaking Change where the default read behavior of a
  fixture changed from a Buffer to being read with utf8 encoding. Fixes
  #​19344.
• Fixed a regression in 9.0.0 where
  cy.contains() attempted to ignore <script> and <style> elements found
  within <body>. by deleting them from the dom. This behavior was corrected to
  ignore the elements without deleting them. Fixes
  #​19377.
• Cypress will no longer crash when proxying an ill formed request. For example,
  if the application under test has a resource of "http: //localhost/asset.js"
  (notice the extraneous space), Cypress will now log a debug message and the
  asset will fail to load. Fixes
  #​9220.
• Correct Cypress.Command.add() and Cypress.Command.override() TypeScript
  types. Fixes #​18879,
  #​19095 and
  #​18940.
  • Custom command implementations typings take into account prevSubject
    variants.
  • Custom command implementations now allows to NOT return a value.
  • Custom command overwrites typings take into account originalFn function.
• Add types for Cypress.session.clearAllSavedSessions(). Fixes
  #​19363.

Dependencies:

• Upgraded ssri from 6.0.1 to 6.0.2 to mitigate
  ssri vulnerability. Addressed in
  #​19351.

v9.1.1

Compare Source

Released 12/03/2021

Bugfixes:

• Fixed a regression in 9.1.0 where our
  built binary didn't contain patches to some dependencies. Addressed in
  #​19239. This fixed some
  issues including:
  • Requests containing ~ will no longer be improperly encoded. Fixes
    #​19083,
    #​19084,
    #​19115,
    #​19096,
    #​19178.
  • A TypeError displaying data.hasOwnProperty is not a function will no
    longer throw in some situations. Fixes
    #​19091.
  • Empty extra hooks will no longer be sent as data when recording to the
    Dashboard. Fixes
    #​19087.
  • The Runner hanging when baseUrl is set to null to load a local file. Fixes
    #​19105
• When using the default configuration of "nodeVersion": "system" with an
  installed system node >=17, Cypress will now work properly rather than throw
  an error incorrectly pointing to the user's plugin file. Fixes
  #​18914.
• Shadow DOM elements no longer error as hidden during actionability when the
  element is covered by its parent shadow root. Fixes
  #​18008.
• When using .type() events now correctly propagate out of the shadow DOM.
  Fixes #​17531.
• The this context is now properly preserved when overwriting cy.clock().
  Fixes #​19158.

Dependencies:

• Upgraded @cypress/request from 2.88.7 to 2.88.10. Addressed in
  #​19099.

v9.1.0

Compare Source

Released 11/22/2021

Features:

• A CYPRESS environment variable will be set to true in child processes where
  Cypress runs user code in Node.js. You can now detect that you're running in
  Cypress by looking for process.env.CYPRESS. Addresses
  #​18805.

Bugfixes:

• Specs with % in the filename will no longer fail to load and now behave as any
  other spec. Fixes
  #​18871.
• When using the Selector Playground, the HTML attribute's value will be wrapped
  in double-quotes. Fixes
  #​1884.
• The call count is now shown in the Command Log when using
  cy.stub().log(false). Fixes
  #​18907.
• The warning message for retrying connection to a browser has been improved to
  indicate when it is still waiting. Fixes
  #​18644.
• Cypress commands that rely on this context now have access to this when
  overridden. Fixes #​18899.

v9.0.0

Compare Source

Released 11/10/2021

Breaking Changes:

• The nodeVersion configuration option now defaults to system. The behavior
  of the system option has changed to always use the Node.js binary/version
  that launched Cypress. If Cypress was not launched via the terminal, Cypress
  will use the bundled Node.js version. This could change the behavior of code
  within your pluginsFile since it may be run in your system Node.js
  version. Addresses
  #​18684.
• Windows 32-bit is no longer supported in Cypress. Addresses
  #​17962.
• An error will now be thrown if an invalid value is passed to Cypress.config.
  Previously invalid values were ignored and could cause unexpected behavior.
  Addresses #​18589.
• cy.contains() no longer yields the <body> element when it matches the
  content of <script> or <style> tags. Addresses
  #​14861.
• Attempting to add an existing built-in Cypress command using
  Cypress.Commands.add() will now throw an error, indicating that
  Cypress.Commands.overwrite() should be used instead to overwrite the
  behavior of existing commands. Addresses
  #​18572.
• Custom command implementations are now typed based on the declared custom
  chainables. Addresses
  #​17496.
• The bundled Node.js version was upgraded from 14.17.0 to 16.5.0. This
  could change the behavior of code within the pluginsFile when using the
  bundled Node.js version of Cypress. Addressed in
  #​18317.

Deprecations:

• The nodeVersion configuration option has been deprecated and will be removed
  in a future release.

Features:

• When null is passed as the encoding to cy.readFile() or cy.fixture(),
  the file is treated as binary and read as a Buffer. Similarly, null passed
  as the encoding to cy.writeFile() allows direct writing of buffers. If the
  encoding is unspecified, the default remains utf8, matching the current
  behavior. Addresses
  #​18534.

Bugfixes:

• Sticky elements within a fixed container will now be able to be properly
  scrolled to during action commands. Fixes
  #​4233.
• document.referrer will now correctly reflect the correct value from the
  application under test after cy.visit(). Fixes
  #​4295.

Dependencies:

• Upgraded Chrome browser version used during cypress run and when selecting
  Electron browser in cypress open from 91 to 94. Addressed in
  #​15292.
• Upgraded bundled Node.js version from 14.17.0 to 16.5.0. Addressed in
  #​15292.
• Upgraded electron from 14.1.0 to 15.2.0. Addressed in
  #​15292.

motdotla/dotenv

v16.0.0

Compare Source

Added

• Breaking: Backtick support 🎉 (#​615)

If you had values containing the backtick character, please quote those values with either single or double quotes.

v15.0.1

Compare Source

Changed

• Properly parse empty single or double quoted values 🐞 (#​614)

v15.0.0

Compare Source

v15.0.0 is a major new release with some important breaking changes.

Added

• Breaking: Multiline parsing support (just works. no need for the flag.)

Changed

• Breaking: # marks the beginning of a comment (UNLESS the value is wrapped in quotes. Please update your .env files to wrap in quotes any values containing #. For example: SECRET_HASH="something-with-a-#-hash").

..Understandably, (as some teams have noted) this is tedious to do across the entire team. To make it less tedious, we recommend using dotenv cli going forward. It's an optional plugin that will keep your .env files in sync between machines, environments, or team members.

Removed

• Breaking: Remove multiline option (just works out of the box now. no need for the flag.)

v14.3.2

Compare Source

Changed

• Preserve backwards compatibility on values containing # 🐞 (#​603)

v14.3.1

Compare Source

Changed

• Preserve backwards compatibility on exports by re-introducing the prior in-place exports 🐞 (#​606)

v14.3.0

Compare Source

Added

• Add multiline option 🎉 (#​486)

v14.2.0

Compare Source

Added

• Add dotenv_config_override cli option
• Add DOTENV_CONFIG_OVERRIDE command line env option

v14.1.1

Compare Source

Added

• Add React gotcha to FAQ on README

v14.1.0

Compare Source

Added

• Add override option 🎉 (#​595)

v14.0.1

Compare Source

Added

• Log error on failure to load .env file (#​594)

v14.0.0

Compare Source

Added

• Breaking: Support inline comments for the parser 🎉 (#​568)

v13.0.1

Compare Source

Changed

• Hide comments and newlines from debug output (#​404)

v13.0.0

Compare Source

Added

• Breaking: Add type file for config.js (#​539)

v12.0.4

Compare Source

Changed

• README updates
• Minor order adjustment to package json format

v12.0.3

Compare Source

Changed

• Simplified jsdoc for consistency across editors

v12.0.2

Compare Source

Changed

• Improve embedded jsdoc type documentation

v12.0.1

Compare Source

Changed

• README updates and clarifications

v12.0.0

Compare Source

Removed

• Breaking: drop support for Flow static type checker (#​584)

Changed

• Move types/index.d.ts to lib/main.d.ts (#​585)
• Typescript cleanup (#​587)
• Explicit typescript inclusion in package.json (#​566)

v11.0.0

Compare Source

Changed

• Breaking: drop support for Node v10 (#​558)
• Patch debug option (#​550)

node-fetch/node-fetch

v3.2.3

Compare Source

Bug Fixes

• handle bom in text and json (#​1482) (6425e20)

v3.2.2

Compare Source

v3.2.1

Compare Source

Bug Fixes

• cancel request example import (#​1513) (61b3b5a)

v3.2.0

Compare Source

Features

• export Blob, File and FormData + utilities (#​1463) (81b1378)

v3.1.1

Compare Source

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

• core: update fetch-blob by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1371
• docs: Fix typo around sending a file by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1381
• core: (http.request): Cast URL to string before sending it to NodeJS core by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1378
• core: handle errors from the request body stream by @​mdmitry01 in https://github.com/node-fetch/node-fetch/pull/1392
• core: Better handle wrong redirect header in a response by @​tasinet in https://github.com/node-fetch/node-fetch/pull/1387
• core: Don't use buffer to make a blob by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1402
• docs: update readme for TS @​types/node-fetch by @​adamellsworth in https://github.com/node-fetch/node-fetch/pull/1405
• core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @​maxshirshin in https://github.com/node-fetch/node-fetch/pull/1369
• core: Don't use global buffer by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1422
• ci: fix main branch by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1429
• core: use more node: protocol imports by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1428
• core: Warn when using data by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1421
• docs: Create SECURITY.md by @​JamieSlome in https://github.com/node-fetch/node-fetch/pull/1445
• core: don't forward secure headers to 3th party by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1449

New Contributors

• @​mdmitry01 made their first contribution in https://github.com/node-fetch/node-fetch/pull/1392
• @​tasinet made their first contribution in https://github.com/node-fetch/node-fetch/pull/1387
• @​adamellsworth made their first contribution in https://github.com/node-fetch/node-fetch/pull/1405
• @​maxshirshin made their first contribution in https://github.com/node-fetch/node-fetch/pull/1369
• @​JamieSlome made their first contribution in https://github.com/node-fetch/node-fetch/pull/1445

Full Changelog: node-fetch/node-fetch@v3.1.0...v3.1.1

v3.1.0

Compare Source

What's Changed

• fix(Body): Discourage form-data and buffer() by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1212
• fix: Pass url string to http.request by @​serverwentdown in https://github.com/node-fetch/node-fetch/pull/1268
• Fix octocat image link by @​lakuapik in https://github.com/node-fetch/node-fetch/pull/1281
• fix(Body.body): Normalize Body.body into a node:stream by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/924
• docs(Headers): Add default Host request header to README.md file by @​robertoaceves in https://github.com/node-fetch/node-fetch/pull/1316
• Update CHANGELOG.md by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1292
• Add highWaterMark to cloned properties by @​davesidious in https://github.com/node-fetch/node-fetch/pull/1162
• Update README.md to fix HTTPResponseError by @​thedanfernandez in https://github.com/node-fetch/node-fetch/pull/1135
• docs: switch url to URL by @​dhritzkiv in https://github.com/node-fetch/node-fetch/pull/1318
• fix(types): declare buffer() deprecated by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1345
• chore: fix lint by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1348
• refactor: use node: prefix for imports by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1346
• Bump data-uri-to-buffer from 3.0.1 to 4.0.0 by @​dependabot in https://github.com/node-fetch/node-fetch/pull/1319
• Bump mocha from 8.4.0 to 9.1.3 by @​dependabot in https://github.com/node-fetch/node-fetch/pull/1339
• Referrer and Referrer Policy by @​tekwiz in https://github.com/node-fetch/node-fetch/pull/1057
• Add typing for Response.redirect(url, status) by @​c-w in https://github.com/node-fetch/node-fetch/pull/1169
• chore: Correct stuff in README.md by @​Jiralite in https://github.com/node-fetch/node-fetch/pull/1361
• docs: Improve clarity of "Loading and configuring" by @​serverwentdown in https://github.com/node-fetch/node-fetch/pull/1323
• feat(Body): Added support for BodyMixin.formData() and constructing bodies with FormData by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1314
• template: Make PR template more task oriented by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1224
• docs: Update code examples by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1365

New Contributors

• @​serverwentdown made their first contribution in https://github.com/node-fetch/node-fetch/pull/1268
• @​lakuapik made their first contribution in https://github.com/node-fetch/node-fetch/pull/1281
• @​robertoaceves made their first contribution in https://github.com/node-fetch/node-fetch/pull/1316
• @​davesidious made their first contribution in https://github.com/node-fetch/node-fetch/pull/1162
• @​thedanfernandez made their first contribution in https://github.com/node-fetch/node-fetch/pull/1135
• @​dhritzkiv made their first contribution in https://github.com/node-fetch/node-fetch/pull/1318
• @​dnalborczyk made their first contribution in https://github.com/node-fetch/node-fetch/pull/1345
• @​dependabot made their first contribution in https://github.com/node-fetch/node-fetch/pull/1319
• @​c-w made their first contribution in https://github.com/node-fetch/node-fetch/pull/1169

Full Changelog: node-fetch/node-fetch@v3.0.0...v3.1.0

v3.0.0

Compare Source

version 3 is going out of a long beta period and switches to stable

One major change is that it's now a ESM only package
See changelog for more information about all the changes.

postcss/postcss-cli

v9.1.0

Compare Source

• Don't write to files if they're unchanged (#​320, #​417)

v9.0.2

Compare Source

• Switch to picocolors (#​409)
• Remove test files from npm package

v9.0.1

Compare Source

• Actually exit with error when attempting to stdout in watch mode
• Remove bin/ from files in package.json

v9.0.0

Compare Source

• BREAKING: Require Node.js v12+
• BREAKING: Must specify full file path, including .js extension, when loading local plugins with --use (#​401)
• BREAKING: Officially remove support for watching postcss config (was already broken in previous releases)
• Add support for dir-dependency messages (#​383, #​391)
• Update deps

tailwindlabs/tailwindcss

v3.0.23

Compare Source

Fixed

• Remove opacity variables from :visited pseudo class (#​7458)
• Support arbitrary values + calc + theme with quotes (#​7462)
• Don't duplicate layer output when scanning content with variants + wildcards (#​7478)
• Implement getClassOrder instead of sortClassList (#​7459)

v3.0.22

Compare Source

Fixed

• Temporarily move postcss to dependencies (#​7424)

v3.0.21

Compare Source

Fixed

• Move prettier plugin to dev dependencies (#​7418)

v3.0.20

Compare Source

Added

• Expose context.sortClassList(classes) (#​7412)

v3.0.19

Compare Source

Fixed

• Fix preflight border color fallback (#​7288)
• Correctly parse shadow lengths without a leading zero (#​7289)
• Don't crash when scanning extremely long class candidates (#​7331)
• Use less hacky fix for URLs detected as custom properties (#​7275)
• Correctly generate negative utilities when dash is before the pre

---

Configuration

📅 Schedule: "every 2 weeks on Monday before 7am" in timezone Europe/Berlin.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.

[dnsos]

Changes in the repo fetcher are required before merging this.

From the node-fetch changelog:

One major change is that it's now a ESM only package

We need to make some adjustments because of this.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm notice 
npm notice New minor version of npm available! 8.5.0 -> 8.6.0
npm notice Changelog: <https://github.com/npm/cli/releases/tag/v8.6.0>
npm notice Run `npm install -g npm@8.6.0` to update!
npm notice 
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: @tailwindcss/typography@0.4.0
npm ERR! Found: tailwindcss@3.0.23
npm ERR! node_modules/tailwindcss
npm ERR!   dev tailwindcss@"3.0.23" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer tailwindcss@"2.0.0-alpha.24 || ^2.0.0" from @tailwindcss/typography@0.4.0
npm ERR! node_modules/@tailwindcss/typography
npm ERR!   dev @tailwindcss/typography@"0.4.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: tailwindcss@2.2.19
npm ERR! node_modules/tailwindcss
npm ERR!   peer tailwindcss@"2.0.0-alpha.24 || ^2.0.0" from @tailwindcss/typography@0.4.0
npm ERR!   node_modules/@tailwindcss/typography
npm ERR!     dev @tailwindcss/typography@"0.4.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate-cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate-cache/others/npm/_logs/2022-04-04T09_19_59_980Z-debug-0.log