[Snyk] Upgrade @11ty/eleventy-fetch from 4.0.1 to 5.0.2

[Sec32fun32]

Snyk has created this PR to upgrade @11ty/eleventy-fetch from 4.0.1 to 5.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 12 versions ahead of your current version.

• The recommended version was released a month ago.

Release notes

Package name: @11ty/eleventy-fetch

• 5.0.2 - 2025-01-07
  
  • Improved advanced API (you might not need this). Existing default export creates an instance and couples data fetching together. This release adds a Fetch named export to create a Fetch instance without fetching data automatically. Works with the concurrency queue. Use the queue() method to fetch data.
  import CachedFetch, { Fetch } from "@ 11ty/eleventy-fetch";

  let data = await CachedFetch(source, options);

  // is the same as:
  let inst = Fetch(source, options);
  let data = await inst.queue();

  • Adds wasLastFetchCacheHit() on Fetch instances, used to solve bug with Eleventy Image disk cache 11ty/eleventy-img#146
  • Improved efficiency: Adds top level instance cache and a few internal caches to avoid duplicate fetch or file system read calls.
  • Adds internal directory manager to avoid duplicate fs.mkdir calls
  • Improved debug logs

  Full Changelog: v5.0.1...v5.0.2

• 5.0.2-beta.2 - 2025-01-04
  
  • Adds internal directory manager to avoid duplicate fs.mkdir calls
  • Improved debug logs

  Full Changelog: v5.0.2-beta.1...v5.0.2-beta.2

• 5.0.2-beta.1 - 2024-12-19
  
  • Improved advanced API (you might not need this). Existing default export creates an instance and couples data fetching together. This release adds a Fetch named export to create a Fetch instance that does not automatically fetch data and works with the concurrency queue. Use async queue() to fetch data.
  import { Fetch } from "@ 11ty/eleventy-fetch";

  let inst = Fetch(source, options);
  let data = await inst.queue();

  same as:

  import CachedFetch from "@ 11ty/eleventy-fetch";

  let data = await CachedFetch(source, options);

  • Adds wasLastFetchCacheHit() on Fetch instances, used to solve bug with Eleventy Image disk cache 11ty/eleventy-img#146
  • Improved efficiency: Adds top level instance cache and a few internal caches to avoid duplicate fetch or file system read calls.

  Full Changelog: v5.0.1...v5.0.2-beta.1

• 5.0.1 - 2024-11-16
  
  • Fix internals issue with missing default options on queue() function for 11ty/eleventy-img, related to 11ty/eleventy-img#252

  Full Changelog: v5.0.0...v5.0.1

• 5.0.1-beta.1 - 2024-11-16
  
  • Fix internals issue with missing default options on queue() function, related to 11ty/eleventy-img#252

  Full Changelog: v5.0.0...v5.0.1-beta.1

• 5.0.0 - 2024-11-16
  

  11ty.dev docs for Fetch have been updated for v5.0.0: https://www.11ty.dev/docs/plugins/fetch/

  npm install @ 11ty/[email protected]
  

  • Breaking: requires Node 18+
  • Breaking: Use native fetch() and drop node-fetch dependency by @ uncenter in #37
  • Not Breaking: for compatibility this package is still CommonJS (not ESM)
  • Support URL instance target #41
  • Use AbortSignal for fetch timeouts #39
  • Support custom function source (async-friendly) @ doug-wade in #32
  • Allow custom filename via filenameFormat by @ chriskirknielsen in #49
  • Add prettier @ uncenter in #38
  • Cache request verbs (e.g. POST versus GET) separately (and request body) by @ Zegnat in #34
  • Upgrade dependencies to get rid of deprecation warnings by @ Zegnat in #46
  • Upgrades flat-cache dependency from v3 to v6 (internal API changes)
  • Update debug module name Eleventy:Fetch by @ uncenter in #40
  • Adds support for type: "xml" (alias for "text")
  • Adds support for type: "parsed-xml" #53 returns a JS object via @ rgrove’s https://github.com/rgrove/parse-xml
  • Adds returnType: "response" option to return (and cache) Response metadata, including url, status, headers, body.
  • Adds requestId option to control reuse, de-duping, unique cache keys when caching non-URL sources. Fixes a few more bugs with de-duping internally when HTTP methods and body requests are used for cache keys.
• 5.0.0-beta.7 - 2024-11-12
  
  • Adds support for type: "xml" (alias for "text")
  • Adds support for type: "parsed-xml" #53 returns a JS object via @ rgrove’s https://github.com/rgrove/parse-xml
  • Adds returnType: "response" option to return (and cache) Response metadata, including url, status, headers, body.

  Full Changelog: v5.0.0-beta.6...v5.0.0-beta.7
  Full Milestone: https://github.com/11ty/eleventy-fetch/milestone/5?closed=1

• 5.0.0-beta.6 - 2024-11-12
  
  • Adds requestId option to control reuse, de-duping, unique cache keys when caching non-URL sources. Fixes a few more bugs with de-duping internally when HTTP methods and body requests are used for cache keys.

  Full Changelog: v5.0.0-beta.5...v5.0.0-beta.6
  Full Milestone: https://github.com/11ty/eleventy-fetch/milestone/5?closed=1

• 5.0.0-beta.5 - 2024-11-08
  
  • Fix for de-duplication of custom fetching functions #52 (Related to #32)

  Full Changelog: v5.0.0-beta.4...v5.0.0-beta.5
  Full Milestone: https://github.com/11ty/eleventy-fetch/milestone/5?closed=1

• 5.0.0-beta.4 - 2024-10-25
  
  • Very big fix for overly aggressive cache misses due to new cache instance being created too often 818313f

  Full Changelog: v5.0.0-beta.3...v5.0.0-beta.4
  Full Milestone: https://github.com/11ty/eleventy-fetch/milestone/5?closed=1

• 5.0.0-beta.3 - 2024-10-23
• 5.0.0-beta.2 - 2024-10-22
• 4.0.1 - 2024-03-04

from @11ty/eleventy-fetch GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@11ty/[email protected]	environment, network Transitive: filesystem	+14	1.05 MB	zachleat

View full report↗︎

[github-actions]

Hi everyone, it looks like we lost track of this pull request. Please review and see what the next steps are. This pull request will auto-close in 7 days without an update.