[Snyk] Upgrade whatwg-fetch from 3.6.2 to 3.6.17

[Laurry-gee]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade whatwg-fetch from 3.6.2 to 3.6.17.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 15 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-07-20.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: whatwg-fetch

• 3.6.17 - 2023-07-20
  

  What's Changed

  • Revert "Resolves #928" by @ JakeChampion in #1366

  Full Changelog: v3.6.16...v3.6.17

• 3.6.16 - 2023-07-18
  

  What's Changed

  • Resolves #928 by @ JakeChampion in #1364

  Full Changelog: v3.6.15...v3.6.16

• 3.6.15 - 2023-07-18
  

  What's Changed

  • fix #997 by @ JakeChampion in #1363

  Full Changelog: v3.6.14...v3.6.15

• 3.6.14 - 2023-07-18
  

  What's Changed

  • Fix #1076 by @ JakeChampion in #1362

  Full Changelog: v3.6.13...v3.6.14

• 3.6.13 - 2023-07-18
  

  What's Changed

  • respect charset within readBlobAsText by @ JakeChampion in #1361

  Full Changelog: v3.6.12...v3.6.13

• 3.6.12 - 2023-07-18
  

  What's Changed

  • fix: Headers only accepts array which have nested array of length 2 by @ JakeChampion in #1360

  Full Changelog: v3.6.11...v3.6.12

• 3.6.11 - 2023-07-18
  

  What's Changed

  • Define Body.arrayBuffer even if support.blob is false by @ JakeChampion in #1359

  Full Changelog: v3.6.10...v3.6.11

• 3.6.10 - 2023-07-18
  

  What's Changed

  • use global Headers if they exist by @ JakeChampion in #1358

  Full Changelog: v3.6.9...v3.6.10

• 3.6.9 - 2023-07-18
  

  What's Changed

  • fix: when no body supplied, do not set bodyUsed to true by @ JakeChampion in #1357

  Full Changelog: v3.6.8...v3.6.9

• 3.6.8 - 2023-07-18
  

  What's Changed

  • validate status is in range by @ JakeChampion in #1356

  Full Changelog: v3.6.7...v3.6.8

• 3.6.7 - 2023-07-18
• 3.6.6 - 2023-07-18
• 3.6.5 - 2023-07-18
• 3.6.4 - 2023-07-18
• 3.6.3 - 2023-07-18
• 3.6.2 - 2021-02-27

from whatwg-fetch GitHub release notes

Commit messages

Package name: whatwg-fetch

• 49b71a7 3.6.17
• b8338ff Revert "Resolves https://github.com/parseHeaders fails with multiple set-cookie headers in Firefox JakeChampion/fetch#928"
• 64ce761 3.6.16
• ce61789 Resolves https://github.com/parseHeaders fails with multiple set-cookie headers in Firefox JakeChampion/fetch#928
• c0b8634 fix https://github.com/Use of Content-Type (vs Accept) header for setting XHR responseType to 'arraybuffer' JakeChampion/fetch#997
• 32b671d Fix https://github.com/Content-Type inferred from body is overridden if headers are given as object JakeChampion/fetch#1076
• e3375eb respect charset within readBlobAsText
• f7e3e92 fix: Headers only accepts array which have nested array of length 2
• d8669ab Define Body.arrayBuffer even if support.blob is false
• dffc542 use globals if they exist
• 7d92dff fix: when no body supplied, do not set bodyUsed to true
• 0c1d2b9 validate status is in range
• 8984692 dont shadow `global`
• fc921d6 Update year range
• e3f6590 remove invalid-headers test
• 408d3b6 dont use github eslint
• afd09a7 Update node.js.yml
• baca85e Update node.js.yml permissions
• e97321b Update lock.yml permissions
• 9a6d748 fix: ignore not throw on invalid response headers
• a43b628 Add some missed methods which should be normalized as uppercase
• fb5b0cf Update caniuse link to use HTTPS and new pattern
• d1d09fb always set a signal on Request
• 7727e50 Compatible global equals to the false

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs