Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): bump node-fetch from 2.6.0 to 2.6.1 #70

Merged
merged 1 commit into from
Sep 11, 2020

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 11, 2020

Bumps node-fetch from 2.6.0 to 2.6.1.

Release notes

Sourced from node-fetch's releases.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

Changelog

Sourced from node-fetch's changelog.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

  • Fix: honor the size option after following a redirect.
Commits
  • b5e2e41 update version number
  • 2358a6c Honor the size option after following a redirect and revert data uri support
  • 8c197f8 docs: Fix typos and grammatical errors in README.md (#686)
  • 1e99050 fix: Change error message thrown with redirect mode set to error (#653)
  • 244e6f6 docs: Show backers in README
  • 6a5d192 fix: Properly parse meta tag when parameters are reversed (#682)
  • 47a24a0 chore: Add opencollective badge
  • 7b13662 chore: Add funding link
  • 5535c2e fix: Check for global.fetch before binding it (#674)
  • 1d5778a docs: Add Discord badge
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by akepinski, a new releaser for node-fetch since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@github-actions
Copy link
Contributor

Report for v1.3.9-0-unreleased.pr70.54

📦 Packing output
npm notice 
npm notice 📦  [email protected]
npm notice === Tarball Contents === 
npm notice 1.1kB LICENSE            
npm notice 918B  lib/commons.js     
npm notice 479B  lib/constants.js   
npm notice 963B  lib/ffi-bindings.js
npm notice 34B   index.js           
npm notice 6.3kB lib/index.js       
npm notice 2.0kB package.json       
npm notice 2.2kB CHANGELOG.md       
npm notice 5.5kB README.md          
npm notice 742B  index.d.ts         
npm notice === Tarball Details === 
npm notice name:          net-keepalive                               
npm notice version:       1.3.9-0-unreleased.pr70.54                  
npm notice filename:      net-keepalive-1.3.9-0-unreleased.pr70.54.tgz
npm notice package size:  6.4 kB                                      
npm notice unpacked size: 20.2 kB                                     
npm notice shasum:        480b8b4409cfef1c3b1b9d9612480e6712fca6cd    
npm notice integrity:     sha512-BENBAviPI4Fll[...]1KHT0MO6JGb6A==    
npm notice total files:   10                                          
npm notice 
⚡ Install log in dependent packages

> [email protected] install /tmp/tmp.yOXo6DiCBz/node_modules/ffi-napi/node_modules/ref-napi
> node-gyp-build


> [email protected] install /tmp/tmp.yOXo6DiCBz/node_modules/ffi-napi
> node-gyp-build

make: Entering directory '/tmp/tmp.yOXo6DiCBz/node_modules/ffi-napi/build'
CC(target) Release/obj.target/nothing/../node-addon-api/src/nothing.o
AR(target) Release/obj.target/../node-addon-api/src/nothing.a
COPY Release/nothing.a
CC(target) Release/obj.target/ffi/deps/libffi/src/prep_cif.o
CC(target) Release/obj.target/ffi/deps/libffi/src/types.o
CC(target) Release/obj.target/ffi/deps/libffi/src/raw_api.o
CC(target) Release/obj.target/ffi/deps/libffi/src/java_raw_api.o
CC(target) Release/obj.target/ffi/deps/libffi/src/closures.o
../deps/libffi/src/closures.c: In function ‘dlmmap_locked’:
../deps/libffi/src/closures.c:421:7: warning: ignoring return value of ‘ftruncate’, declared with attribute warn_unused_result [-Wunused-result]
     ftruncate (execfd, offset);
     ^~~~~~~~~~~~~~~~~~~~~~~~~~
../deps/libffi/src/closures.c:433:7: warning: ignoring return value of ‘ftruncate’, declared with attribute warn_unused_result [-Wunused-result]
     ftruncate (execfd, offset);
     ^~~~~~~~~~~~~~~~~~~~~~~~~~
CC(target) Release/obj.target/ffi/deps/libffi/src/x86/ffi.o
CC(target) Release/obj.target/ffi/deps/libffi/src/x86/ffi64.o
../deps/libffi/src/x86/ffi64.c: In function ‘classify_argument’:
../deps/libffi/src/x86/ffi64.c:181:18: warning: suggest braces around empty body in an ‘else’ statement [-Wempty-body]
  FFI_ASSERT (0);
                ^
../deps/libffi/src/x86/ffi64.c:156:7: warning: this statement may fall through [-Wimplicit-fallthrough=]
     {
     ^
../deps/libffi/src/x86/ffi64.c:183:5: note: here
   case FFI_TYPE_FLOAT:
   ^~~~
CC(target) Release/obj.target/ffi/deps/libffi/src/x86/unix64.o
CC(target) Release/obj.target/ffi/deps/libffi/src/x86/sysv.o
AR(target) Release/obj.target/deps/libffi/libffi.a
COPY Release/libffi.a
CXX(target) Release/obj.target/ffi_bindings/src/ffi.o
In file included from ../src/ffi.cc:3:0:
../src/ffi.h:148:19: warning: mangled name for ‘Napi::TypedArray FFI::WrapPointer(Napi::Env, T*, size_t) [with T = char*() throw ()]’ will change in C++17 because the exception specification is part of a function type [-Wnoexcept-type]
inline TypedArray WrapPointer(Env env, T* ptr, size_t length = 0) {
                 ^~~~~~~~~~~
../src/ffi.h:148:19: warning: mangled name for ‘Napi::TypedArray FFI::WrapPointer(Napi::Env, T*, size_t) [with T = void*(void*, const char*) throw ()]’ will change in C++17 because the exception specification is part of a function type [-Wnoexcept-type]
../src/ffi.h:148:19: warning: mangled name for ‘Napi::TypedArray FFI::WrapPointer(Napi::Env, T*, size_t) [with T = int(void*) throw ()]’ will change in C++17 because the exception specification is part of a function type [-Wnoexcept-type]
../src/ffi.h:148:19: warning: mangled name for ‘Napi::TypedArray FFI::WrapPointer(Napi::Env, T*, size_t) [with T = void*(const char*, int) throw ()]’ will change in C++17 because the exception specification is part of a function type [-Wnoexcept-type]
CXX(target) Release/obj.target/ffi_bindings/src/callback_info.o
CXX(target) Release/obj.target/ffi_bindings/src/threaded_callback_invokation.o
SOLINK_MODULE(target) Release/obj.target/ffi_bindings.node
COPY Release/ffi_bindings.node
make: Leaving directory '/tmp/tmp.yOXo6DiCBz/node_modules/ffi-napi/build'

> [email protected] install /tmp/tmp.yOXo6DiCBz/node_modules/ref-napi
> node-gyp-build

npm notice created a lockfile as package-lock.json. You should commit this file.
npm WARN [email protected] No description
npm WARN [email protected] No repository field.

+ [email protected]
added 12 packages from 59 contributors and audited 12 packages in 8.601s
found 0 vulnerabilities
ℹ️ Dependencies installed in dependent packages
[email protected] /tmp/tmp.yOXo6DiCBz
└─┬ [email protected]
├── [email protected]
└── [email protected]
📊 Installed size of node_modules in dependent packages
116K	node_modules/debug
9.7M	node_modules/ffi-napi
40K	node_modules/get-symbol-from-current-process-h
40K	node_modules/get-uv-event-loop-napi-h
20K	node_modules/ms
56K	node_modules/net-keepalive
960K	node_modules/node-addon-api
36K	node_modules/node-gyp-build
2.5M	node_modules/ref-napi
204K	node_modules/ref-struct-di
14M	total

@codecov
Copy link

codecov bot commented Sep 11, 2020

Codecov Report

Merging #70 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff            @@
##            master       #70   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            4         4           
  Lines           98        98           
=========================================
  Hits            98        98           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8fb0ead...23e494b. Read the comment docs.

@hertzg hertzg merged commit 84aba59 into master Sep 11, 2020
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/node-fetch-2.6.1 branch September 11, 2020 12:46
github-actions bot pushed a commit that referenced this pull request Sep 11, 2020
### [1.3.9](v1.3.8...v1.3.9) (2020-09-11)

### Bug Fixes

* **deps:** bump node-fetch from 2.6.0 to 2.6.1 ([#70](#70)) ([84aba59](84aba59))
@github-actions
Copy link
Contributor

🎉 This PR is included in version 1.3.9 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant