Merge pull request #1071 from hmcc/bug/1070

Upgrade node-fetch to 2.6.1 to fix GHSA-w7rc-rwvf-8q5r

CHANGELOG.md

@@ -17,6 +17,7 @@
 
 - Improved `tsconfig.json` file lookup strategy: it now looks for it starting from the location of the danger file.
   #1068 [@igorbek](https://github.com/igorbek)
+- Upgrade node-fetch to 2.6.1 to fix GHSA-w7rc-rwvf-8q5r. #1071 [@hmcc](https://github.com/hmcc)
 
 <!-- Your comment above this -->
 
@@ -1778,6 +1779,7 @@ Not usable for others, only stubs of classes etc. - [@orta]
 [@fbartho]: https://github.com/fbartho
 [@fwal]: https://github.com/fwal
 [@happylinks]: https://github.com/happylinks
+[@hmcc]: https://github.com/hmcc
 [@hongrich]: https://github.com/hongrich
 [@hellocore]: https://github.com/HelloCore
 [@imorente]: https://github.com/imorente

package.json

@@ -159,7 +159,7 @@
     "memfs-or-file-map-to-github-branch": "^1.1.0",
     "micromatch": "^3.1.10",
     "node-cleanup": "^2.1.2",
-    "node-fetch": "^2.3.0",
+    "node-fetch": "2.6.1",
     "override-require": "^1.1.1",
     "p-limit": "^2.1.0",
     "parse-diff": "^0.7.0",

yarn.lock

@@ -6219,6 +6219,11 @@ node-cleanup@^2.1.2:
   resolved "https://registry.yarnpkg.com/node-cleanup/-/node-cleanup-2.1.2.tgz#7ac19abd297e09a7f72a71545d951b517e4dde2c"
   integrity sha1-esGavSl+Caf3KnFUXZUbUX5N3iw=
 
+node-fetch@2.6.1:
+  version "2.6.1"
+  resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052"
+  integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==
+
 node-fetch@^1.7.1:
   version "1.7.1"
   resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-1.7.1.tgz#899cb3d0a3c92f952c47f1b876f4c8aeabd400d5"