chore(deps): update dependencies (major) (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sindresorhus/slugify	1.1.2 -> 2.1.0
chalk	4.1.2 -> 5.0.1
execa	5.1.1 -> 6.1.0
husky	7.0.4 -> 8.0.1
node-fetch	2.6.7 -> 3.2.10

---

Release Notes

sindresorhus/slugify

v2.1.0

Compare Source

• Add preserveTrailingDash option (#​57) 2aa5659

v2.0.0

Compare Source

Breaking

• Require Node.js 12 12498c9
• This package is now pure ESM. Please read this.
• slugify.counter moved to a named export slugifyWithCounter

chalk/chalk

v5.0.1

Compare Source

• Add main field to package.json for backwards compatibility with some developer tools 85f7e96

v5.0.0

Compare Source

Breaking

• This package is now pure ESM. Please read this.
  • If you use TypeScript, you need to use TypeScript 4.7 or later. Why.
  • If you use a bundler, make sure it supports ESM and that you have correctly configured it for ESM.
  • The Chalk issue tracker is not a support channel for your favorite build/bundler tool.
  • It's totally fine to stay on Chalk v4. It's been stable for years.
• Require Node.js 12.20 fa16f4e
• Move some properties off the default export to individual named exports:
  • chalk.Instance → Chalk
  • chalk.supportsColor → supportsColor
  • chalk.stderr → chalkStderr
  • chalk.stderr.supportsColor → supportsColorStderr
• Remove .keyword(), .hsl(), .hsv(), .hwb(), and .ansi() coloring methods (#​433) 4cf2e40
  • These were not commonly used and added a lot of bloat to Chalk. You can achieve the same by using the color-convert package.
• The tagged template literal support moved into a separate package: chalk-template (#​524) c987c61

-import chalk from 'chalk';
+import chalkTemplate from 'chalk-template';

-chalk`2 + 3 = {bold ${2 + 3}}`;
+chalkTemplate`2 + 3 = {bold ${2 + 3}}`;

Improvements

• Bundle dependencies 04fdbd6
  • This means Chalk no longer has any dependencies 🎉
• The install size is less than half of v4.
• Add overline style (#​433) 4cf2e40
• Preserve function prototype methods (#​434) 0fba91b

sindresorhus/execa

v6.1.0

Compare Source

• Support AbortController (#​490) c6e791a
• Allow cwd and localDir options to be URLs (#​492) 93ab929

v6.0.0

Compare Source

Breaking

• Require Node.js 12.20 (#​478) 7707880
• This package is now pure ESM. Please read this.
• Moved from a default export to named exports.
  • require('execa') → import {execa} from 'execa'
  • require('execa').sync → import {execaSync} from 'execa'
  • require('execa').command → import {execaCommand} from 'execa'
  • require('execa').commandSync → import {execaCommandSync} from 'execa'
  • require('execa').node → import {execaNode} from 'execa'

typicode/husky

v8.0.1

Compare Source

• fix: use POSIX equality operator

v8.0.0

Compare Source

What's Changed

Feats

• feat: add husky - prefix to logged global error messages by @​joshbalfour in https://github.com/typicode/husky/pull/1092
• feat: show PATH when command not found to improve debuggability
• feat: drop Node 12 support
• feat: skip install if $HUSKY=0

Fixes

• fix: hook script use /usr/bin/env sh instead of direct path of sh by @​skhaz in https://github.com/typicode/husky/pull/1051
• fix: actually set 'husky_skip_init' as readonly in ./husky.sh by @​hyperupcall in https://github.com/typicode/husky/pull/1104
• fix: force basename/dirname to treat $0 as an argument by @​mataha in https://github.com/typicode/husky/pull/1132
• fix: remove git.io links by @​renbaoshuo in https://github.com/typicode/husky/pull/1136

Docs

• docs: fix uninstall via npm by @​pddpd in https://github.com/typicode/husky/pull/1033
• docs: add dog emoji as favicon by @​jamiehaywood in https://github.com/typicode/husky/pull/1095
• docs: replace deprecated npx --no-install option with npx --no by @​sibiraj-s in https://github.com/typicode/husky/pull/1070
• docs: add pnpm installation by @​MohamadKh75 in https://github.com/typicode/husky/pull/1139

Chore

• chore: update workflows by @​tiziodcaio in https://github.com/typicode/husky/pull/1125

node-fetch/node-fetch

v3.2.10

Compare Source

Bug Fixes

• ReDoS referrer (#​1611) (2880238)

v3.2.9

Compare Source

Bug Fixes

• Headers: don't forward secure headers on protocol change (#​1599) (e87b093)

v3.2.8

Compare Source

Bug Fixes

• possibly flaky test (#​1523) (11b7033)

v3.2.7

Compare Source

Bug Fixes

• always warn Request.data (#​1550) (4f43c9e)

v3.2.6

Compare Source

Bug Fixes

• undefined reference to response.body when aborted (#​1578) (1c5ed6b)

v3.2.5

Compare Source

Bug Fixes

• use space in accept-encoding values (#​1572) (a92b5d5), closes #​1571

v3.2.4

Compare Source

Bug Fixes

• don't uppercase unknown methods (#​1542) (004b3ac)

v3.2.3

Compare Source

Bug Fixes

• handle bom in text and json (#​1482) (6425e20)

v3.2.2

Compare Source

Bug Fixes

• add missing formdata export to types (#​1518) (a4ea5f9), closes #​1517

v3.2.1

Compare Source

Bug Fixes

• cancel request example import (#​1513) (61b3b5a)

v3.2.0

Compare Source

Features

• export Blob, File and FormData + utilities (#​1463) (81b1378)

v3.1.1

Compare Source

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

• core: update fetch-blob by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1371
• docs: Fix typo around sending a file by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1381
• core: (http.request): Cast URL to string before sending it to NodeJS core by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1378
• core: handle errors from the request body stream by @​mdmitry01 in https://github.com/node-fetch/node-fetch/pull/1392
• core: Better handle wrong redirect header in a response by @​tasinet in https://github.com/node-fetch/node-fetch/pull/1387
• core: Don't use buffer to make a blob by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1402
• docs: update readme for TS @​types/node-fetch by @​adamellsworth in https://github.com/node-fetch/node-fetch/pull/1405
• core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @​maxshirshin in https://github.com/node-fetch/node-fetch/pull/1369
• core: Don't use global buffer by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1422
• ci: fix main branch by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1429
• core: use more node: protocol imports by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1428
• core: Warn when using data by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1421
• docs: Create SECURITY.md by @​JamieSlome in https://github.com/node-fetch/node-fetch/pull/1445
• core: don't forward secure headers to 3th party by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1449

New Contributors

• @​mdmitry01 made their first contribution in https://github.com/node-fetch/node-fetch/pull/1392
• @​tasinet made their first contribution in https://github.com/node-fetch/node-fetch/pull/1387
• @​adamellsworth made their first contribution in https://github.com/node-fetch/node-fetch/pull/1405
• @​maxshirshin made their first contribution in https://github.com/node-fetch/node-fetch/pull/1369
• @​JamieSlome made their first contribution in https://github.com/node-fetch/node-fetch/pull/1445

Full Changelog: node-fetch/node-fetch@v3.1.0...v3.1.1

v3.1.0

Compare Source

What's Changed

• fix(Body): Discourage form-data and buffer() by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1212
• fix: Pass url string to http.request by @​serverwentdown in https://github.com/node-fetch/node-fetch/pull/1268
• Fix octocat image link by @​lakuapik in https://github.com/node-fetch/node-fetch/pull/1281
• fix(Body.body): Normalize Body.body into a node:stream by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/924
• docs(Headers): Add default Host request header to README.md file by @​robertoaceves in https://github.com/node-fetch/node-fetch/pull/1316
• Update CHANGELOG.md by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1292
• Add highWaterMark to cloned properties by @​davesidious in https://github.com/node-fetch/node-fetch/pull/1162
• Update README.md to fix HTTPResponseError by @​thedanfernandez in https://github.com/node-fetch/node-fetch/pull/1135
• docs: switch url to URL by @​dhritzkiv in https://github.com/node-fetch/node-fetch/pull/1318
• fix(types): declare buffer() deprecated by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1345
• chore: fix lint by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1348
• refactor: use node: prefix for imports by @​dnalborczyk in https://github.com/node-fetch/node-fetch/pull/1346
• Bump data-uri-to-buffer from 3.0.1 to 4.0.0 by @​dependabot in https://github.com/node-fetch/node-fetch/pull/1319
• Bump mocha from 8.4.0 to 9.1.3 by @​dependabot in https://github.com/node-fetch/node-fetch/pull/1339
• Referrer and Referrer Policy by @​tekwiz in https://github.com/node-fetch/node-fetch/pull/1057
• Add typing for Response.redirect(url, status) by @​c-w in https://github.com/node-fetch/node-fetch/pull/1169
• chore: Correct stuff in README.md by @​Jiralite in https://github.com/node-fetch/node-fetch/pull/1361
• docs: Improve clarity of "Loading and configuring" by @​serverwentdown in https://github.com/node-fetch/node-fetch/pull/1323
• feat(Body): Added support for BodyMixin.formData() and constructing bodies with FormData by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1314
• template: Make PR template more task oriented by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1224
• docs: Update code examples by @​jimmywarting in https://github.com/node-fetch/node-fetch/pull/1365

New Contributors

• @​serverwentdown made their first contribution in https://github.com/node-fetch/node-fetch/pull/1268
• @​lakuapik made their first contribution in https://github.com/node-fetch/node-fetch/pull/1281
• @​robertoaceves made their first contribution in https://github.com/node-fetch/node-fetch/pull/1316
• @​davesidious made their first contribution in https://github.com/node-fetch/node-fetch/pull/1162
• @​thedanfernandez made their first contribution in https://github.com/node-fetch/node-fetch/pull/1135
• @​dhritzkiv made their first contribution in https://github.com/node-fetch/node-fetch/pull/1318
• @​dnalborczyk made their first contribution in https://github.com/node-fetch/node-fetch/pull/1345
• @​dependabot made their first contribution in https://github.com/node-fetch/node-fetch/pull/1319
• @​c-w made their first contribution in https://github.com/node-fetch/node-fetch/pull/1169

Full Changelog: node-fetch/node-fetch@v3.0.0...v3.1.0

v3.0.0

Compare Source

version 3 is going out of a long beta period and switches to stable

One major change is that it's now a ESM only package
See changelog for more information about all the changes.

---

Configuration

📅 Schedule: Branch creation - "before 8am on Wednesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.

[millsp]

Unrelated: some deps aren't pinned.

[Jolg42]

Fails with

packages/fetch-engine build$ tsc -d
Error: packages/fetch-engine build: ../../node_modules/.pnpm/tempy@2.0.0/node_modules/tempy/index.d.ts(2,22): error TS2307: Cannot find module 'node:buffer' or its corresponding type declarations.
Error: packages/fetch-engine build: src/downloadZip.ts(71,11): error TS2531: Object is possibly 'null'.
Error: packages/fetch-engine build: src/downloadZip.ts(83,29): error TS2531: Object is possibly 'null'.
Error: packages/fetch-engine build: src/downloadZip.ts(84,54): error TS2769: No overload matches this call.
packages/fetch-engine build:   Overload 1 of 3, '(stream: ReadableStream, options?: Options<ToStringEncoding> | undefined): Promise<string>', gave the following error.
packages/fetch-engine build:     Argument of type 'ReadableStream | null' is not assignable to parameter of type 'ReadableStream'.
packages/fetch-engine build:       Type 'null' is not assignable to type 'ReadableStream'.
packages/fetch-engine build:   Overload 2 of 3, '(stream: ReadableStream, options?: Options<"buffer"> | undefined): Promise<Buffer>', gave the following error.
packages/fetch-engine build:     Argument of type 'ReadableStream | null' is not assignable to parameter of type 'ReadableStream'.
packages/fetch-engine build:       Type 'null' is not assignable to type 'ReadableStream'.
Error: packages/fetch-engine build: src/getLatestTag.ts(210,5): error TS2322: Type 'unknown' is not assignable to type 'object | string[]'.
packages/fetch-engine build:   Type 'unknown' is not assignable to type 'string[]'.
packages/fetch-engine build: Failed

[Jolg42]

Probably needs an upgrade of esbuild first

engines-wrapper/.github/workflows/setup.sh

Line 8 in 62868f2

npm i --silent -g pnpm@6 esbuild@0.8.53 --unsafe-perm

[Jolg42]

We don't have tests to check if this works or not at the moment

[Jolg42]

@millsp Why did you close it?