Upgrade deps (node-fetch 2.6.7)

notifme / notifme-sdk

A Node.js library to send all kinds of transactional notifications.

https://notifme.github.io/www/

MIT License

1.94k stars 149 forks source link

Upgrade deps (node-fetch 2.6.7) #95

Closed mrfrase3 closed 6 months ago

mrfrase3 commented 2 years ago

My audit is shouting at me that node-fetch has a "high" vulnerability, I've updated it in this PR as well as running an audit fix. Tests are passing.

node-pushnotifications has some nested issues with @parse/node-apn, which is waiting for a maintainer to accept a dependabot. will watch for that and maybe do a separate PR.

There are a bunch of critical vulnerabilities with the dev dependencies, especially the catcher, but those aren't super-priority and don't show up on my project's audits.

BDav24 commented 6 months ago

Thanks for the PR, I updated strait to 2.7.0: https://github.com/notifme/notifme-sdk/releases/tag/v1.12.0