ITADN

build(deps): bump got from 11.8.6 to 15.0.0

#245Pull Requestdependabot[bot] 创建于 2026-04-02
dependenciesjavascript
D
dependabot[bot]commented
Bumps [got](https://github.com/sindresorhus/got) from 11.8.6 to 15.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sindresorhus/got/releases">got's releases</a>.</em></p> <blockquote> <h2>v15.0.0</h2> <h2>Breaking changes</h2> <ul> <li>Require Node.js 22 b933476</li> <li>Remove promise cancel API a06ac6c <ul> <li><code>promise.cancel()</code> is gone. Use the <a href="https://github.com/sindresorhus/got/blob/main/documentation/2-options.md#signal"><code>signal</code> option</a> with <a href="https://developer.mozilla.org/docs/Web/API/AbortController"><code>AbortController</code></a> instead.</li> </ul> </li> <li>Remove <code>isStream</code> option c241c6c <ul> <li>Use <code>got.stream()</code> directly.</li> </ul> </li> <li>Use native <code>FormData</code> global 670b228 <ul> <li>Use the <a href="https://developer.mozilla.org/docs/Web/API/FormData">Web API <code>FormData</code></a> global directly (available in Node.js 18+).</li> </ul> </li> <li><code>responseType: 'buffer'</code> returns <code>Uint8Array</code> instead of <code>Buffer</code> 309e36d <ul> <li><code>response.rawBody</code> and <code>promise.buffer()</code> now return a <code>Uint8Array</code>. <code>Buffer</code> is a subclass of <code>Uint8Array</code>, so most code will continue to work, but strict type checks will need updating.</li> </ul> </li> <li><code>strictContentLength</code> defaults to <code>true</code> 08e9dff <ul> <li>Got now throws a <code>ContentLengthMismatchError</code> by default if <code>Content-Length</code> doesn't match the actual body size. Set <code>{strictContentLength: false}</code> to restore the old behavior.</li> </ul> </li> <li><code>retry.enforceRetryRules</code> defaults to <code>true</code> 9bc8dfb <ul> <li>Custom <code>calculateDelay</code> functions are now only called when a retry is actually allowed by <code>limit</code>, <code>methods</code>, <code>statusCodes</code>, and <code>errorCodes</code>. If your <code>calculateDelay</code> was previously used to override retry eligibility unconditionally, set <code>{retry: {enforceRetryRules: false}}</code>.</li> </ul> </li> <li>Piped header copying is now opt-in 8e392f3 <ul> <li>Got no longer automatically copies headers from a piped stream. Set <code>{copyPipedHeaders: true}</code> to re-enable. Hop-by-hop headers are never copied even when enabled (RFC 9110 §7.6.1).</li> </ul> </li> <li><code>url</code> removed from public options objects 87de8d6 <ul> <li>The <code>url</code> property is no longer present on the options object passed to hooks. Use <code>response.url</code> or <code>request.requestUrl</code> instead.</li> </ul> </li> <li>300 and 304 responses are no longer auto-followed 5fccaab <ul> <li>Per RFC 9110, 304 is a conditional-GET hint, not a redirect, and 300 is only a SHOULD for user agents. Got now returns these responses as-is. Handle them manually if needed.</li> </ul> </li> </ul> <h2>Improvements</h2> <ul> <li>Stream decode large <code>text</code>/<code>json</code> bodies incrementally for lower peak memory usage c9a95b1</li> <li><code>uploadProgress</code> now emits granular per-chunk events for <code>json</code> and <code>form</code> request bodies 13c889d</li> </ul> <hr /> <h2>Migration guide</h2> <h3>Replace <code>promise.cancel()</code> with <code>AbortController</code></h3> <p><strong>Before:</strong></p> <pre lang="js"><code>const promise = got(url); promise.cancel(); </code></pre> <p><strong>After:</strong></p> <pre lang="js"><code>const controller = new AbortController(); const promise = got(url, {signal: controller.signal}); controller.abort(); </code></pre> <h3>Replace <code>isStream: true</code> with <code>got.stream()</code></h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sindresorhus/got/commit/a26825097f926d4d86d68c4d10c6370842eb3ccf"><code>a268250</code></a> 15.0.0</li> <li><a href="https://github.com/sindresorhus/got/commit/e5e645a7d6deeec02933bf474727a541775772c7"><code>e5e645a</code></a> Various improvements</li> <li><a href="https://github.com/sindresorhus/got/commit/dc2656b8d0bebae853b8e1284502ca0135e404c3"><code>dc2656b</code></a> Do not forward hop-by-hop piped headers</li> <li><a href="https://github.com/sindresorhus/got/commit/5fccaab415309c66c12da1f44808c7fe4011d030"><code>5fccaab</code></a> Do not auto-follow 300 and 304 responses</li> <li><a href="https://github.com/sindresorhus/got/commit/d158f28036052d81225d1564385a0aa0a10743e6"><code>d158f28</code></a> Various improvements</li> <li><a href="https://github.com/sindresorhus/got/commit/fb909e904b04de3b742e2df0a37673e4ac7e918f"><code>fb909e9</code></a> Tweaks</li> <li><a href="https://github.com/sindresorhus/got/commit/6be69a54b3f984a6950bffc0f6b86a7eed8ca6b7"><code>6be69a5</code></a> Fix CI</li> <li><a href="https://github.com/sindresorhus/got/commit/309e36d1040c0815154160b1379e04f942a7bf3a"><code>309e36d</code></a> Use Uint8Array for user-facing binary responses</li> <li><a href="https://github.com/sindresorhus/got/commit/8e392f32c59f649be55b616a5a90aa27cd0d01f0"><code>8e392f3</code></a> Make piped header copying opt-in and preserve explicit headers</li> <li><a href="https://github.com/sindresorhus/got/commit/9bc8dfb0190fe91b6b2c781e70bfdc0df47873ec"><code>9bc8dfb</code></a> Change <code>retry.enforceRetryRules</code> default to true</li> <li>Additional commits viewable in <a href="https://github.com/sindresorhus/got/compare/v11.8.6...v15.0.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | got | [>= 12.a, < 13] | | got | [>= 13.a, < 14] | | got | [>= 14.a, < 15] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=got&package-manager=npm_and_yarn&previous-version=11.8.6&new-version=15.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
合并状态:未合并 关闭于 2026-04-03 2 条评论