Skip to content

chore(deps-dev): bump isomorphic-unfetch from 3.1.0 to 4.0.2#185

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/isomorphic-unfetch-4.0.2
Open

chore(deps-dev): bump isomorphic-unfetch from 3.1.0 to 4.0.2#185
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/isomorphic-unfetch-4.0.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 3, 2023

Bumps isomorphic-unfetch from 3.1.0 to 4.0.2.

Release notes

Sourced from isomorphic-unfetch's releases.

isomorphic-4.0.2

Full Changelog: developit/unfetch@isomorphic-4.0.1...isomorphic-4.0.2

4.0.1

Quick publishing fix.

isomorphic-4.0.1

What's Changed

New Contributors

Full Changelog: developit/unfetch@isomorphic-3.1.0...isomorphic-4.0.1

4.0.0

🦄 Small breaking change for awesome ponyness:

  • unfetch is now a pure ponyfill.
  • unfetch/polyfill is now the polyfill version (even smaller than the ponyfill!)
  • All modules are shipped in all formats, and the polyfill is now < 500b.
  • Also a little bugfix for IE11 (#85, thanks @​khusa)

TL;DR: require('unfetch') no longer returns window.fetch when it exists. For that, use unfetch/polyfill.

This change makes unfetch lovely to use as a polyfill from HTML:

<script src="https://unpkg.com/unfetch/polyfill"></script>
<!-- that's it! -->
<script>foo = await fetch('/foo.json')</script>

Otherwise, if you're using Unfetch and bundling your code, continue as you were before:

if (!self.fetch) self.fetch = require('unfetch');
// or simply:
import 'unfetch/polyfill';

Important - the one thing to avoid:

Since unfetch is a proper ponyfill, it will now overwrite fetch even in supported browsers if you do the following

// never do this!
window.fetch = require('unfetch');

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 3, 2023
@github-actions
Copy link

github-actions bot commented Jan 3, 2023

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ EDITORCONFIG editorconfig-checker 2 0 0.01s
✅ JSON eslint-plugin-jsonc 2 0 1.7s
✅ JSON jsonlint 2 0 0.22s
✅ JSON npm-package-json-lint yes no 1.28s
✅ JSON v8r 2 0 4.25s
✅ REPOSITORY checkov yes no 11.36s
✅ REPOSITORY gitleaks yes no 0.52s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY secretlint yes no 0.82s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/isomorphic-unfetch-4.0.2 branch from e15bb08 to dad8cd1 Compare March 13, 2023 15:11
@ahmadnassri
Copy link
Owner

@dependabot rebase

Bumps [isomorphic-unfetch](https://github.com/developit/unfetch) from 3.1.0 to 4.0.2.
- [Release notes](https://github.com/developit/unfetch/releases)
- [Commits](developit/unfetch@3.1.0...isomorphic-4.0.2)

---
updated-dependencies:
- dependency-name: isomorphic-unfetch
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/isomorphic-unfetch-4.0.2 branch from dad8cd1 to 39eeb89 Compare June 10, 2023 23:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant