[Snyk] Security upgrade node-fetch from 2.6.1 to 3.2.10

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/angular_devkit/build_webpack/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NODEFETCH-2964180	Yes	Proof of Concept

Commit messages

Package name: node-fetch

The new version differs by 217 commits.

• 2880238 fix: ReDoS referrer (fix: move environment files to config directory angular/angular-cli#1611)
• e87b093 fix(Headers): don't forward secure headers on protocol change (fix: Set fs building/polyfill empty for better package support angular/angular-cli#1599)
• bcfb71c chore: remove triple-slash directives from typings (chore: add a script to create the shrinkwrap file (and transform) angular/angular-cli#1285) (ng make-this-awesome Cannot find module 'angular-cli/lib/utilities/string' angular/angular-cli#1287)
• 95165d5 fix spelling (Remove import 'rxjs/Rx' from test.ts angular/angular-cli#1602)
• 11b7033 fix: possibly flaky test (feat: add logic to filter out spec file associated with the given com… angular/angular-cli#1523)
• 4f43c9e fix: always warn Request.data (Removing crypto filter from config angular/angular-cli#1550)
• 1c5ed6b fix: undefined reference to response.body when aborted (Webpack -- typings issue with firebase angular/angular-cli#1578)
• a92b5d5 fix: use space in accept-encoding values (Why default by using systemjs instead of webpack ? angular/angular-cli#1572)
• 0f122b8 docs: fix formdata code example (beta.11-webpack: No custom server routes possible? angular/angular-cli#1562)
• 6ae9c76 docs(readme): response.clone() is not async (Errors during install of angular-cli angular/angular-cli#1560)
• 043a5fc Fix leaking listeners (prefixInterfaces question angular/angular-cli#1295) (fix(): sass support angular/angular-cli#1474)
• 004b3ac fix: don't uppercase unknown methods (feat: add route command's blueprint angular/angular-cli#1542)
• c33e393 Fix Code of Conduct link in Readme. (Couldn't update from beta.10 to beta.11. angular/angular-cli#1532)
• 6875205 docs: Fix link markup to Options definition (feat: add features in get-dependent-files.ts angular/angular-cli#1525)
• 6425e20 fix: handle bom in text and json (Webpack: Getting warning from one npm package when running ng serve  angular/angular-cli#1482)
• a4ea5f9 fix: add missing formdata export to types (Angular install beta.10 on windows does not complete angular/angular-cli#1518)
• 61b3b5a fix: cancel request example import (Webpack: 3rd Party module not found, but functional angular/angular-cli#1513)
• 5e78af3 Replace changelog with valid url (feat: implement --base-href argument angular/angular-cli#1506)
• 9014db7 types: support `agent: false` ([Bug] Webpack hangs when requiring external templates/css inside components with an app-shell project angular/angular-cli#1502)
• 2e1f3a5 chore: fix typo in credential error message (ng serve on second attempt : cliSystemConfigPackages is not defined angular/angular-cli#1496)
• 4ce2ce5 docs(readme): fix typo (Angularfire2 has no exported mng 'Angularfire'. angular/angular-cli#1489)
• ba23fd2 docs: remove the changelog (Operate in non-CLI projects - Feature Request angular/angular-cli#1464)
• 8fedc1b core: move support and feature to discussion (Proxy support for ng serve angular/angular-cli#1471)
• 0b43b9f docs: update formdata example (Add project source dir as a module angular/angular-cli#1465)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[pull-dog]

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

• docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

• @pull-dog up to reprovision or provision the server.
• @pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
97a7e8c0-122f-11ed-8ea2-9f7546eb6d4d