Skip to content

build(deps-dev): bump node-fetch from 2.6.0 to 2.6.1 - #31

Merged
p5hgryktp4 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/node-fetch-2.6.7
Sep 13, 2026
Merged

p5hgryktp4 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/node-fetch-2.6.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor

Bumps node-fetch from 2.6.0 to 2.6.1.

Release notes

Sourced from node-fetch's releases.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

Changelog

Sourced from node-fetch's changelog.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

  • Fix: honor the size option after following a redirect.
Commits
  • b5e2e41 update version number
  • 2358a6c Honor the size option after following a redirect and revert data uri support
  • 8c197f8 docs: Fix typos and grammatical errors in README.md (#686)
  • 1e99050 fix: Change error message thrown with redirect mode set to error (#653)
  • 244e6f6 docs: Show backers in README
  • 6a5d192 fix: Properly parse meta tag when parameters are reversed (#682)
  • 47a24a0 chore: Add opencollective badge
  • 7b13662 chore: Add funding link
  • 5535c2e fix: Check for global.fetch before binding it (#674)
  • 1d5778a docs: Add Discord badge
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by akepinski, a new releaser for node-fetch since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 13, 2026
@vercel

vercel Bot commented Sep 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
github-code-review-notifier Ready Ready Preview Sep 13, 2026 6:21am UTC

@dependabot dependabot Bot changed the title build(deps): bump node-fetch from 2.6.0 to 2.6.7 build(deps-dev): bump node-fetch from 2.6.0 to 2.6.1 Sep 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/node-fetch-2.6.7 branch from 798b576 to 1de352d Compare September 13, 2026 05:50
Security fix (CVE-2022-0235). package-lock.json already resolves
node-fetch to 2.6.7; this closes the remaining yarn.lock ^2.1.2 path
(2.6.0) to the patched 2.6.1. No lockfile-wide re-resolution.
@EnixCoda
EnixCoda force-pushed the dependabot/npm_and_yarn/node-fetch-2.6.7 branch from 1de352d to 00f4932 Compare September 13, 2026 06:21
@p5hgryktp4
p5hgryktp4 merged commit 65b9eed into master Sep 13, 2026
3 of 4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/node-fetch-2.6.7 branch September 13, 2026 06:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants