build(deps): bump got from 11.8.6 to 15.0.0
dependenciesjavascript
Bumps [got](https://github.com/sindresorhus/got) from 11.8.6 to 15.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/sindresorhus/got/releases">got's releases</a>.</em></p>
<blockquote>
<h2>v15.0.0</h2>
<h2>Breaking changes</h2>
<ul>
<li>Require Node.js 22 b933476</li>
<li>Remove promise cancel API a06ac6c
<ul>
<li><code>promise.cancel()</code> is gone. Use the <a href="https://github.com/sindresorhus/got/blob/main/documentation/2-options.md#signal"><code>signal</code> option</a> with <a href="https://developer.mozilla.org/docs/Web/API/AbortController"><code>AbortController</code></a> instead.</li>
</ul>
</li>
<li>Remove <code>isStream</code> option c241c6c
<ul>
<li>Use <code>got.stream()</code> directly.</li>
</ul>
</li>
<li>Use native <code>FormData</code> global 670b228
<ul>
<li>Use the <a href="https://developer.mozilla.org/docs/Web/API/FormData">Web API <code>FormData</code></a> global directly (available in Node.js 18+).</li>
</ul>
</li>
<li><code>responseType: 'buffer'</code> returns <code>Uint8Array</code> instead of <code>Buffer</code> 309e36d
<ul>
<li><code>response.rawBody</code> and <code>promise.buffer()</code> now return a <code>Uint8Array</code>. <code>Buffer</code> is a subclass of <code>Uint8Array</code>, so most code will continue to work, but strict type checks will need updating.</li>
</ul>
</li>
<li><code>strictContentLength</code> defaults to <code>true</code> 08e9dff
<ul>
<li>Got now throws a <code>ContentLengthMismatchError</code> by default if <code>Content-Length</code> doesn't match the actual body size. Set <code>{strictContentLength: false}</code> to restore the old behavior.</li>
</ul>
</li>
<li><code>retry.enforceRetryRules</code> defaults to <code>true</code> 9bc8dfb
<ul>
<li>Custom <code>calculateDelay</code> functions are now only called when a retry is actually allowed by <code>limit</code>, <code>methods</code>, <code>statusCodes</code>, and <code>errorCodes</code>. If your <code>calculateDelay</code> was previously used to override retry eligibility unconditionally, set <code>{retry: {enforceRetryRules: false}}</code>.</li>
</ul>
</li>
<li>Piped header copying is now opt-in 8e392f3
<ul>
<li>Got no longer automatically copies headers from a piped stream. Set <code>{copyPipedHeaders: true}</code> to re-enable. Hop-by-hop headers are never copied even when enabled (RFC 9110 §7.6.1).</li>
</ul>
</li>
<li><code>url</code> removed from public options objects 87de8d6
<ul>
<li>The <code>url</code> property is no longer present on the options object passed to hooks. Use <code>response.url</code> or <code>request.requestUrl</code> instead.</li>
</ul>
</li>
<li>300 and 304 responses are no longer auto-followed 5fccaab
<ul>
<li>Per RFC 9110, 304 is a conditional-GET hint, not a redirect, and 300 is only a SHOULD for user agents. Got now returns these responses as-is. Handle them manually if needed.</li>
</ul>
</li>
</ul>
<h2>Improvements</h2>
<ul>
<li>Stream decode large <code>text</code>/<code>json</code> bodies incrementally for lower peak memory usage c9a95b1</li>
<li><code>uploadProgress</code> now emits granular per-chunk events for <code>json</code> and <code>form</code> request bodies 13c889d</li>
</ul>
<hr />
<h2>Migration guide</h2>
<h3>Replace <code>promise.cancel()</code> with <code>AbortController</code></h3>
<p><strong>Before:</strong></p>
<pre lang="js"><code>const promise = got(url);
promise.cancel();
</code></pre>
<p><strong>After:</strong></p>
<pre lang="js"><code>const controller = new AbortController();
const promise = got(url, {signal: controller.signal});
controller.abort();
</code></pre>
<h3>Replace <code>isStream: true</code> with <code>got.stream()</code></h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/sindresorhus/got/commit/a26825097f926d4d86d68c4d10c6370842eb3ccf"><code>a268250</code></a> 15.0.0</li>
<li><a href="https://github.com/sindresorhus/got/commit/e5e645a7d6deeec02933bf474727a541775772c7"><code>e5e645a</code></a> Various improvements</li>
<li><a href="https://github.com/sindresorhus/got/commit/dc2656b8d0bebae853b8e1284502ca0135e404c3"><code>dc2656b</code></a> Do not forward hop-by-hop piped headers</li>
<li><a href="https://github.com/sindresorhus/got/commit/5fccaab415309c66c12da1f44808c7fe4011d030"><code>5fccaab</code></a> Do not auto-follow 300 and 304 responses</li>
<li><a href="https://github.com/sindresorhus/got/commit/d158f28036052d81225d1564385a0aa0a10743e6"><code>d158f28</code></a> Various improvements</li>
<li><a href="https://github.com/sindresorhus/got/commit/fb909e904b04de3b742e2df0a37673e4ac7e918f"><code>fb909e9</code></a> Tweaks</li>
<li><a href="https://github.com/sindresorhus/got/commit/6be69a54b3f984a6950bffc0f6b86a7eed8ca6b7"><code>6be69a5</code></a> Fix CI</li>
<li><a href="https://github.com/sindresorhus/got/commit/309e36d1040c0815154160b1379e04f942a7bf3a"><code>309e36d</code></a> Use Uint8Array for user-facing binary responses</li>
<li><a href="https://github.com/sindresorhus/got/commit/8e392f32c59f649be55b616a5a90aa27cd0d01f0"><code>8e392f3</code></a> Make piped header copying opt-in and preserve explicit headers</li>
<li><a href="https://github.com/sindresorhus/got/commit/9bc8dfb0190fe91b6b2c781e70bfdc0df47873ec"><code>9bc8dfb</code></a> Change <code>retry.enforceRetryRules</code> default to true</li>
<li>Additional commits viewable in <a href="https://github.com/sindresorhus/got/compare/v11.8.6...v15.0.0">compare view</a></li>
</ul>
</details>
<br />
<details>
<summary>Most Recent Ignore Conditions Applied to This Pull Request</summary>
| Dependency Name | Ignore Conditions |
| --- | --- |
| got | [>= 12.a, < 13] |
| got | [>= 13.a, < 14] |
| got | [>= 14.a, < 15] |
</details>
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
合并状态:未合并 关闭于 2026-04-03 2 条评论