[Snyk] Upgrade whatwg-fetch from 3.6.2 to 3.6.19

[TheAutisticTechie]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade whatwg-fetch from 3.6.2 to 3.6.19.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 17 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2023-09-11.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	579/1000 Why? Has a fix available, CVSS 7.3	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-BRAINTREESANITIZEURL-2339882	579/1000 Why? Has a fix available, CVSS 7.3	Proof of Concept
	Open Redirect SNYK-JS-NODEFORGE-2330875	579/1000 Why? Has a fix available, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-NODEFORGE-2331908	579/1000 Why? Has a fix available, CVSS 7.3	No Known Exploit
	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	579/1000 Why? Has a fix available, CVSS 7.3	No Known Exploit
	Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	579/1000 Why? Has a fix available, CVSS 7.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: whatwg-fetch

• 3.6.19 - 2023-09-11
  

  3.6.19 (2023-09-11)

  Bug Fixes

  • Have unique error messages for xhr timeouts and errors (#1380) (7170f0b)
• 3.6.18 - 2023-08-28
  

  What's Changed

  • Fix - File fetching broken since commit 0c1d2b9 by @ mercpls in #1375

  New Contributors

  • @ mercpls made their first contribution in #1375

  Full Changelog: v3.6.17...v3.6.18

• 3.6.17 - 2023-07-20
  

  What's Changed

  • Revert "Resolves #928" by @ JakeChampion in #1366

  Full Changelog: v3.6.16...v3.6.17

• 3.6.16 - 2023-07-18
  

  What's Changed

  • Resolves #928 by @ JakeChampion in #1364

  Full Changelog: v3.6.15...v3.6.16

• 3.6.15 - 2023-07-18
  

  What's Changed

  • fix #997 by @ JakeChampion in #1363

  Full Changelog: v3.6.14...v3.6.15

• 3.6.14 - 2023-07-18
  

  What's Changed

  • Fix #1076 by @ JakeChampion in #1362

  Full Changelog: v3.6.13...v3.6.14

• 3.6.13 - 2023-07-18
  

  What's Changed

  • respect charset within readBlobAsText by @ JakeChampion in #1361

  Full Changelog: v3.6.12...v3.6.13

• 3.6.12 - 2023-07-18
  

  What's Changed

  • fix: Headers only accepts array which have nested array of length 2 by @ JakeChampion in #1360

  Full Changelog: v3.6.11...v3.6.12

• 3.6.11 - 2023-07-18
  

  What's Changed

  • Define Body.arrayBuffer even if support.blob is false by @ JakeChampion in #1359

  Full Changelog: v3.6.10...v3.6.11

• 3.6.10 - 2023-07-18
  

  What's Changed

  • use global Headers if they exist by @ JakeChampion in #1358

  Full Changelog: v3.6.9...v3.6.10

• 3.6.9 - 2023-07-18
• 3.6.8 - 2023-07-18
• 3.6.7 - 2023-07-18
• 3.6.6 - 2023-07-18
• 3.6.5 - 2023-07-18
• 3.6.4 - 2023-07-18
• 3.6.3 - 2023-07-18
• 3.6.2 - 2021-02-27

from whatwg-fetch GitHub release notes

Commit messages

Package name: whatwg-fetch

• 385655b chore(main): release 3.6.19 (Fix items not opening when they have a password reprompt set bitwarden/web#1381)
• 7170f0b fix: Have unique error messages for xhr timeouts and errors (Add importing of 1passwords 1pux files bitwarden/web#1380)
• 0d875ca Create release.yml
• cdc19a8 Create SECURITY.md
• b48a696 3.6.18
• 0e7d1dd automatically generate a changelog
• 96017de Fix - File fetching broken since commit 0c1d2b9 (Add --ignore-unknown to prettier on lint-staged bitwarden/web#1375)
• 1dc07c6 Remove broken links
• 49b71a7 3.6.17
• b8338ff Revert "Resolves https://github.com/parseHeaders fails with multiple set-cookie headers in Firefox JakeChampion/fetch#928"
• 64ce761 3.6.16
• ce61789 Resolves https://github.com/parseHeaders fails with multiple set-cookie headers in Firefox JakeChampion/fetch#928
• c0b8634 fix https://github.com/Use of Content-Type (vs Accept) header for setting XHR responseType to 'arraybuffer' JakeChampion/fetch#997
• 32b671d Fix https://github.com/Content-Type inferred from body is overridden if headers are given as object JakeChampion/fetch#1076
• e3375eb respect charset within readBlobAsText
• f7e3e92 fix: Headers only accepts array which have nested array of length 2
• d8669ab Define Body.arrayBuffer even if support.blob is false
• dffc542 use globals if they exist
• 7d92dff fix: when no body supplied, do not set bodyUsed to true
• 0c1d2b9 validate status is in range
• 8984692 dont shadow `global`
• fc921d6 Update year range
• e3f6590 remove invalid-headers test
• 408d3b6 dont use github eslint

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs