Bump node-fetch, @ampproject/toolbox-core and @ampproject/toolbox-validator-rules in /docs

Bumps node-fetch, @ampproject/toolbox-core and @ampproject/toolbox-validator-rules. These dependencies needed to be updated together. Updates node-fetch from 2.6.0 to 2.6.7

Release notes

Sourced from node-fetch's releases.

v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

fix: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1453

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7

v2.6.6

What's Changed

fix(URL): prefer built in URL version when available and fallback to whatwg by @jimmywarting in node-fetch/node-fetch#1352

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6

v2.6.2

fixed main path in package.json

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

Commits

1ef4b56 backport of #1449 (#1453)
8fe5c4e 2.x: Specify encoding as an optional peer dependency in package.json (#1310)
f56b0c6 fix(URL): prefer built in URL version when available and fallback to whatwg (...
b5417ae fix: import whatwg-url in a way compatible with ESM Node (#1303)
18193c5 fix v2.6.3 that did not sending query params (#1301)
ace7536 fix: properly encode url with unicode characters (#1291)
152214c Fix(package.json): Corrected main file path in package.json (#1274)
b5e2e41 update version number
2358a6c Honor the size option after following a redirect and revert data uri support
8c197f8 docs: Fix typos and grammatical errors in README.md (#686)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by endless, a new releaser for node-fetch since your current version.

Updates @ampproject/toolbox-core from 2.5.4 to 2.9.0

Release notes

Sourced from @ampproject/toolbox-core's releases.

v2.8.0

:rocket: Enhancement

optimizer

#1217 Enable OptimizeAmpBind transformer by default (@schlessera)

#1195 Add AmpBoilerplateErrorHandler transformer (@schlessera)

#1194 Add crossorigin=anonymous to nomodule scripts the same as module ones (@westonruter)

#1196 Prevent SSR for amp-img occurring after second paragraph (@westonruter)

#1192 Filter duplicate extensions by src URL (@sebastianbenz)

#1180 Add minimal Optimizer Transformer Config (@sebastianbenz)

#1181 Disable cache warmup on install (@sebastianbenz)

#1170 👽 Remove postcss deprecation warning (@lluerich)

#1147 Add amp-bind optimizer (@jridgewell)

#1143 Add extension scripts in logical order (@schlessera)

core

#1182 Use os.tmpDir for file system cache (@sebastianbenz)

#1142 Don't remove sizes for hero images (@sebastianbenz)

#1140 Enable ESM module version of AMP Runtime and Components by default (@sebastianbenz)

page-experience

#1174 PX: enable mobile device emulation (@sebastianbenz)

#1173 PX:ignore invinsible elements (@sebastianbenz)

#1172 PX: escape html in suggestions (@sebastianbenz)

#1171 PX: detect hero images (@sebastianbenz)

#1168 Check for early iframes (@patrickkettner)

#1169 Give page specific advice on how to fix fonts (@sebastianbenz)

linter, page-experience

#1164 Add more detailed info to font checks (@sebastianbenz)

linter

#1165 Check for latest component versions (@lluerich)

#1160 Run amp-linter checks as part of this module (@sebastianbenz)

#1156 Add page experience guide (@sebastianbenz)

#1153 ♻️ Refactor icon font detection (@lluerich)

#1149 🔧 Add icomoon (@lluerich)

#1148 ♻️ Refine icon font detection (@lluerich)

#1145 🚀 Add icon font linter rule (@lluerich)

:bug: Bug Fix

optimizer

#1235 Pull latest component versions from amphtml repo (@sebastianbenz)

#1234 Fix: don't auto import experimental bento components (@sebastianbenz)

#1198 Improve logic to detect explicitly marked hero images (@schlessera)

#1188 Make ES modules option consistent (@schlessera)

#1151 Show blurredPlaceholders warning only when enabled (@att55)

#1143 Add extension scripts in logical order (@schlessera)

#1137 Drop the final width descriptor in a generated srcset. (@kristoferbaxter)

#1139 fix missing custom-element attribute from nomodule import (@sebastianbenz)

#1135 Add missing amp-ad ending tag (@schlessera)

page-experience

#1186 Skip fonts with a data: URL source from fontPreloading check (@westonruter)

#1184 Remove hard-coded isTiny() result for intrinsic layout (@schlessera)

#1161 when using module/nomodule make sure to use modulepreload instead of preload for the priority hint (@erwinmombay)

... (truncated)

Changelog

Sourced from @ampproject/toolbox-core's changelog.

2.9.0 (2022-06-23)

:rocket: Enhancement

cloudflare-optimizer-scripts

#1318 Add support for Opaque redirects (@abdulhannanali)

optimizer

#1324 Implement SSR for amp-audio extension (@ediamin)

:bug: Bug Fix

optimizer

#1319 Fix i-amphtml-sizer responsive issue (@ediamin)

#1312 More robust auto extension import (@sebastianbenz)

#1303 Fix for issue #1302: "SSR: Duplicated ids in rendered markup, if there are nodes with attributes 'media', 'heights' or 'sizes'" (@DK-Stern)

#1305 Fix for issue #1304: "SSR: Transforming of nodes with attribute 'heights' fails, if value contains multiple media queries" (@DK-Stern)

:house: Internal

cache-url, cli, cloudflare-optimizer-scripts, linter, optimizer-docker, optimizer, page-experience, update-cache

#1331 Update dependencies to fix critical security issues (@sebastianbenz)

cache-list, cache-url, cli, cloudflare-optimizer-scripts, core, cors, linter, optimizer-docker, optimizer-express, optimizer, page-experience, runtime-fetch, runtime-version, script-csp, update-cache, validator-rules

#1326 Reset main branch to v2.8.10 (@sebastianbenz)

Committers: 6

Edi Amin (@ediamin)

Hannan Ali (@abdulhannanali)

Pascal Birchler (@swissspidy)

Sebastian Benz (@sebastianbenz)

@DK-Stern

erwin mombay (@erwinmombay)

v2.8.10

:bug: Bug Fix

optimizer

#1312 More robust auto extension import

v2.8.9

:bug: Bug Fix

optimizer

#1303 Fix for issue #1302: "SSR: Duplicated ids in rendered markup, if there are nodes with attributes 'media', 'heights' or 'sizes'"

#1305 Fix for issue #1304: "SSR: Transforming of nodes with attribute 'heights' fails, if value contains multiple media queries"

v2.8.8

:rocket: Enhancement

linter

Upgrade to latest amphtml validator version

v2.8.5

... (truncated)

Commits

0826825 v2.9.0
90adbd7 Reset main branch to v2.8.10 (#1326)
49e00b4 upgrade node-fetch
3ecfa2f Fix typo in core package's readme
0f63a77 v3.0.0-canary.2
ec931bf change "mode strict" to "use strict" (#1275)
09d6825 V3.0.0 canary.1 (#1243)
3e97c1d Make cache configurable (#1222)
3d08600 [breaking] Add fast and full default configs (#1205)
082fd32 v2.8.0-canary.15
Additional commits viewable in compare view

Updates @ampproject/toolbox-validator-rules from 2.5.4 to 2.9.0

Release notes

Sourced from @ampproject/toolbox-validator-rules's releases.

v2.8.0

:rocket: Enhancement

optimizer

#1217 Enable OptimizeAmpBind transformer by default (@schlessera)

#1195 Add AmpBoilerplateErrorHandler transformer (@schlessera)

#1194 Add crossorigin=anonymous to nomodule scripts the same as module ones (@westonruter)

#1196 Prevent SSR for amp-img occurring after second paragraph (@westonruter)

#1192 Filter duplicate extensions by src URL (@sebastianbenz)

#1180 Add minimal Optimizer Transformer Config (@sebastianbenz)

#1181 Disable cache warmup on install (@sebastianbenz)

#1170 👽 Remove postcss deprecation warning (@lluerich)

#1147 Add amp-bind optimizer (@jridgewell)

#1143 Add extension scripts in logical order (@schlessera)

core

#1182 Use os.tmpDir for file system cache (@sebastianbenz)

#1142 Don't remove sizes for hero images (@sebastianbenz)

#1140 Enable ESM module version of AMP Runtime and Components by default (@sebastianbenz)

page-experience

#1174 PX: enable mobile device emulation (@sebastianbenz)

#1173 PX:ignore invinsible elements (@sebastianbenz)

#1172 PX: escape html in suggestions (@sebastianbenz)

#1171 PX: detect hero images (@sebastianbenz)

#1168 Check for early iframes (@patrickkettner)

#1169 Give page specific advice on how to fix fonts (@sebastianbenz)

linter, page-experience

#1164 Add more detailed info to font checks (@sebastianbenz)

linter

#1165 Check for latest component versions (@lluerich)

#1160 Run amp-linter checks as part of this module (@sebastianbenz)

#1156 Add page experience guide (@sebastianbenz)

#1153 ♻️ Refactor icon font detection (@lluerich)

#1149 🔧 Add icomoon (@lluerich)

#1148 ♻️ Refine icon font detection (@lluerich)

#1145 🚀 Add icon font linter rule (@lluerich)

:bug: Bug Fix

optimizer

#1235 Pull latest component versions from amphtml repo (@sebastianbenz)

#1234 Fix: don't auto import experimental bento components (@sebastianbenz)

#1198 Improve logic to detect explicitly marked hero images (@schlessera)

#1188 Make ES modules option consistent (@schlessera)

#1151 Show blurredPlaceholders warning only when enabled (@att55)

#1143 Add extension scripts in logical order (@schlessera)

#1137 Drop the final width descriptor in a generated srcset. (@kristoferbaxter)

#1139 fix missing custom-element attribute from nomodule import (@sebastianbenz)

#1135 Add missing amp-ad ending tag (@schlessera)

page-experience

#1186 Skip fonts with a data: URL source from fontPreloading check (@westonruter)

#1184 Remove hard-coded isTiny() result for intrinsic layout (@schlessera)

#1161 when using module/nomodule make sure to use modulepreload instead of preload for the priority hint (@erwinmombay)

... (truncated)

Changelog

Sourced from @ampproject/toolbox-validator-rules's changelog.

2.9.0 (2022-06-23)

:rocket: Enhancement

cloudflare-optimizer-scripts

#1318 Add support for Opaque redirects (@abdulhannanali)

optimizer

#1324 Implement SSR for amp-audio extension (@ediamin)

:bug: Bug Fix

optimizer

#1319 Fix i-amphtml-sizer responsive issue (@ediamin)

#1312 More robust auto extension import (@sebastianbenz)

#1303 Fix for issue #1302: "SSR: Duplicated ids in rendered markup, if there are nodes with attributes 'media', 'heights' or 'sizes'" (@DK-Stern)

#1305 Fix for issue #1304: "SSR: Transforming of nodes with attribute 'heights' fails, if value contains multiple media queries" (@DK-Stern)

:house: Internal

cache-url, cli, cloudflare-optimizer-scripts, linter, optimizer-docker, optimizer, page-experience, update-cache

#1331 Update dependencies to fix critical security issues (@sebastianbenz)

cache-list, cache-url, cli, cloudflare-optimizer-scripts, core, cors, linter, optimizer-docker, optimizer-express, optimizer, page-experience, runtime-fetch, runtime-version, script-csp, update-cache, validator-rules

#1326 Reset main branch to v2.8.10 (@sebastianbenz)

Committers: 6

Edi Amin (@ediamin)

Hannan Ali (@abdulhannanali)

Pascal Birchler (@swissspidy)

Sebastian Benz (@sebastianbenz)

@DK-Stern

erwin mombay (@erwinmombay)

v2.8.10

:bug: Bug Fix

optimizer

#1312 More robust auto extension import

v2.8.9

:bug: Bug Fix

optimizer

#1303 Fix for issue #1302: "SSR: Duplicated ids in rendered markup, if there are nodes with attributes 'media', 'heights' or 'sizes'"

#1305 Fix for issue #1304: "SSR: Transforming of nodes with attribute 'heights' fails, if value contains multiple media queries"

v2.8.8

:rocket: Enhancement

linter

Upgrade to latest amphtml validator version

v2.8.5

... (truncated)

Commits

0826825 v2.9.0
90adbd7 Reset main branch to v2.8.10 (#1326)
49e00b4 upgrade node-fetch
0f63a77 v3.0.0-canary.2
09d6825 V3.0.0 canary.1 (#1243)
3d08600 [breaking] Add fast and full default configs (#1205)
0974deb v2.8.0-canary.9
bb57012 update dependencies
0ec5cb5 v2.8.0-canary.0
881ffbd v2.7.4
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mozilla/nimbus-shared/network/alerts).

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

mozilla / nimbus-shared

Bump node-fetch, @ampproject/toolbox-core and @ampproject/toolbox-validator-rules in /docs #216

v2.6.7

Security patch release

What's Changed

v2.6.6

What's Changed

v2.6.2

v2.6.1

v2.8.0

:rocket: Enhancement

:bug: Bug Fix

2.9.0 (2022-06-23)

:rocket: Enhancement

:bug: Bug Fix

:house: Internal

Committers: 6

v2.8.10

:bug: Bug Fix

v2.8.9

:bug: Bug Fix

v2.8.8

:rocket: Enhancement

v2.8.5

v2.8.0

:rocket: Enhancement

:bug: Bug Fix

2.9.0 (2022-06-23)

:rocket: Enhancement

:bug: Bug Fix

:house: Internal

Committers: 6

v2.8.10

:bug: Bug Fix

v2.8.9

:bug: Bug Fix

v2.8.8

:rocket: Enhancement

v2.8.5