[Snyk] Security upgrade node-fetch from 2.6.1 to 3.1.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • superset-frontend/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: node-fetch

The new version differs by 187 commits.

• 36e47e8 3.1.1 release (Bogdan/download csv apache/superset#1451)
• 5304f3f Don't change relative location header on manual redirect ([mapbox] leaving label field empty should result in no labels showing up apache/superset#1105)
• f5d3cf5 fix(Headers): don't forward secure headers to 3th party (Bkyryliuk patch 1 apache/superset#1449)
• f2c3d56 Create SECURITY.md (Issue installing on Redshift apache/superset#1445)
• 4ae3538 core: Warn when using data (sqlalchemy.exc.DataError - invalid input syntax for integer: "" apache/superset#1421)
• 41f53b9 fix: use more node: protocol imports (Implement auto completion in the SQL Editor apache/superset#1428)
• f674875 ci: fix main branch (Added dashboard standalone page apache/superset#1429)
• 1493d04 core: Don't use global buffer (Hardening of SQL Editor -> Visualize flow apache/superset#1422)
• eb33090 Chore: Fix logical operator priority (regression) to disallow GET/HEAD with non-empty body (Issues with Druid timezones apache/superset#1369)
• 7ba5bc9 update readme for TS @ type/node-fetch ([Feature] Local/custom viz apache/superset#1405)
• 6956bf8 core: Don't use buffer to make a blob (Filter immune slices array stores strings. apache/superset#1402)
• 6e4c1e4 fix(Redirect): Better handle wrong redirect header in a response ([BUG] Some timestamps in druid query are missing timezone apache/superset#1387)
• 2d5399e fix: handle errors from the request body stream ([Feature] Update metrics when columns are updated apache/superset#1392)
• 0284826 fix(http.request): Cast URL to string before sending it to NodeJS core ([sql lab] use a lighter table component in ResultSet apache/superset#1378)
• 3f0e0c2 docs: Fix typo around sending a file (How to configure Impala to use SSL? apache/superset#1381)
• 30c3cfe update fetch-blob (SQL Lab: Uncaught TypeError: Cannot read property 'sortable' of undefined apache/superset#1371)
• 109bd21 release minor change (3.1.0) (Timeseries tooltips (on dashboard) not working on FF apache/superset#1364)
• ff71348 docs: Update code examples (Dashboard diagram colors are random apache/superset#1365)
• 1068c8a template: Make PR template more task oriented (Added access check + Druid in endpoint apache/superset#1224)
• 3944f24 feat(Body): Added support for `BodyMixin.formData()` and constructing bodies with FormData (Added url shortner for sharing query link apache/superset#1314)
• 37ac459 docs: Improve clarity of "Loading and configuring" (polyfill es2015 in older browsers and for phantomjs apache/superset#1323)
• a3a5b63 chore: Correct stuff in README.md (Adjusted top margin of heatmap plot to get it working in V2 apache/superset#1361)
• ff7e950 Add typing for Response.redirect(url, status) (--WIP-- add faves/starred things to /welcome apache/superset#1169)
• 2d80b0b Add support for Referrer and Referrer Policy (Support more dashboard semantics around how filters affect slices apache/superset#1057)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. For admin, please label this issue .pinned to prevent stale bot from closing the issue.