Merge pull request #6093 from plotly/canvas-2.9-node-fetch-2.6.7

bump canvas 2.9 and use node-fetch 2.6.7

Author: archmoj

package-lock.json

@@ -124,7 +124,7 @@
     "browserify": "^17.0.0",
     "browserify-transform-tools": "^1.7.0",
     "bubleify": "^2.0.0",
-    "canvas": "^2.8.0",
+    "canvas": "^2.9.0",
     "check-node-version": "^4.2.1",
     "chttps": "^1.0.6",
     "deep-equal": "^2.0.5",