Update node-fetch due to security issue (#5928)

Author: hsubox76

.changeset/metal-apes-double.md

@@ -0,0 +1,10 @@
+---
+'@firebase/auth': patch
+'@firebase/auth-compat': patch
+'@firebase/firestore': patch
+'@firebase/functions': patch
+'@firebase/rules-unit-testing': patch
+'@firebase/storage': patch
+---
+
+Upgrade `node-fetch` dependency due to a security issue.

integration/messaging/package.json

@@ -15,7 +15,7 @@
     "express": "4.17.1",
     "geckodriver": "2.0.4",
     "mocha": "9.1.1",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "selenium-assistant": "6.1.0"
   }
 }

packages/auth-compat/package.json

@@ -47,7 +47,7 @@
     "@firebase/auth-types": "0.11.0",
     "@firebase/component": "0.5.10",
     "@firebase/util": "1.4.3",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "selenium-webdriver": "^4.0.0-beta.2",
     "tslib": "^2.1.0"
   },

packages/auth/package.json

@@ -80,7 +80,7 @@
     "@firebase/component": "0.5.10",
     "@firebase/logger": "0.3.2",
     "@firebase/util": "1.4.3",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "selenium-webdriver": "4.0.0-rc-1",
     "tslib": "^2.1.0"
   },

packages/firestore/package.json

@@ -83,7 +83,7 @@
     "@firebase/webchannel-wrapper": "0.6.1",
     "@grpc/grpc-js": "^1.3.2",
     "@grpc/proto-loader": "^0.6.0",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "tslib": "^2.1.0"
   },
   "peerDependencies": {

packages/functions/package.json

@@ -66,7 +66,7 @@
     "@firebase/auth-interop-types": "0.1.6",
     "@firebase/app-check-interop-types": "0.1.0",
     "@firebase/util": "1.4.3",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "tslib": "^2.1.0"
   },
   "nyc": {

packages/rules-unit-testing/package.json

@@ -39,6 +39,6 @@
     "url": "https://github.com/firebase/firebase-js-sdk/issues"
   },
   "dependencies": {
-    "node-fetch": "2.6.5"
+    "node-fetch": "2.6.7"
   }
 }

packages/storage/package.json

@@ -43,7 +43,7 @@
   "dependencies": {
     "@firebase/util": "1.4.3",
     "@firebase/component": "0.5.10",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "tslib": "^2.1.0"
   },
   "peerDependencies": {

repo-scripts/changelog-generator/package.json

@@ -18,7 +18,7 @@
   "dependencies": {
     "@changesets/types": "3.3.0",
     "@changesets/get-github-info": "0.5.0",
-    "node-fetch": "2.6.5",
+    "node-fetch": "2.6.7",
     "@types/node-fetch": "2.5.12"
   },
   "license": "Apache-2.0",

yarn.lock

@@ -11918,7 +11918,14 @@ node-emoji@^1.4.1:
   dependencies:
     lodash "^4.17.21"
 
-[email protected], node-fetch@^2.5.0, node-fetch@^2.6.1:
+[email protected]:
+  version "2.6.7"
+  resolved "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz#24de9fba827e3b4ae44dc8b20256a379160052ad"
+  integrity sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==
+  dependencies:
+    whatwg-url "^5.0.0"
+
+node-fetch@^2.5.0, node-fetch@^2.6.1:
   version "2.6.5"
   resolved "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.5.tgz#42735537d7f080a7e5f78b6c549b7146be1742fd"
   integrity sha512-mmlIVHJEu5rnIxgEgez6b9GgWXbkZj5YZ7fx+2r94a2E+Uirsp6HsPTPlomfdHtpt/B0cdKviwkoaM6pyvUOpQ==