Update for cross-fetch Dependancy

[xosupernova]

cross-fetch was updated due to the node-fetch security vulnerabilities
cross-fetch@3.0.5 > cross-fetch@3.0.6

[kachkaev]

This has been closed by #921, but the release is still pending.

@patrickkettner 🙏

[damianwadley]

Is there an ETA on that release?

[patrickkettner]

published as alpha4

[damianwadley]

Are you sure?

[kachkaev]

I see @ampproject/toolbox-optimizer@2.7.0-alpha.4. @ampproject/toolbox-core though is still at 2.6.1 (released on 1 October).

[damianwadley]

Ah, my bad, I didn't see the tag here so I didn't check if npm had a new version.

[kachkaev]

Also note @ampproject/toolbox-validator-rules@2.5.4 → cross-fetch@3.0.5 → node-fetch@2.6.0. Other @ampproject/* packages might also be affected.

[sebastianbenz]

This should be fixed with 2.7.1