build(deps): bump @splitsoftware/splitio from 10.17.1 to 10.18.1

[dependabot]

Bumps @splitsoftware/splitio from 10.17.1 to 10.18.1.

Changelog

Sourced from @​splitsoftware/splitio's changelog.

10.18.1 (April 20, 2022)

• Updated some dependencies for vulnerability fixes.
• Bugfixing - Updated @​splitsoftware/splitio-commons package to avoid an error when requiring some third-party dependencies used by the package (Related to issue splitio/javascript-client#662).
• Bugfixing - Updated ready method to rejects the promise with an Error object instead of a string value (Related to issue splitio/javascript-client#654).

10.18.0 (April 7, 2022)

• Added user consent feature to allow delaying or disabling the data tracking from SDK until user consent is explicitly granted or declined. Read more in our docs.

• Added scheduler.impressionsQueueSize property to SDK configuration to limit the amount of impressions tracked in memory. Read more in our docs.

• Added support to accept TLS configuration options to the Redis storage in NodeJS. Read more in our docs.

• Updated type definitions to specialize the type of the storage.options object for Redis storage in NodeJS.

• Updated some dependencies for vulnerability fixes.

• Bugfixing - Updated internal isObject utility function, to avoid unexpected behaviors on frameworks and libraries that uses multiple VM contexts, like NuxtJS dev server.

• Bugfixing - Logging settings (i.e., the debug SDK configuration param and factory logger methods) are configurable per factory instance, instead of affecting all factories globally.

• Bugfixing - Fixed an issue with connectionTimeout options params of Redis storage, that was being ignored and not passed down to the underlying ioredis client.

• Bugfixing - Updated the validation of some SDK configuration params to log errors and throw exceptions with clear descriptions of the invalid setup:

  • If passing a non-string value to sync.impressionsMode, the SDK logs the error: "you passed an invalid impressionsMode config param. It should be one of the following values: 'OPTIMIZED', 'DEBUG'. Defaulting to 'OPTIMIZED'.".
  • If passing 'REDIS' storage type without setting mode to 'consumer', the SDK logs the error: "The provided REDIS storage is invalid for this mode. It requires 'consumer' mode. Fallbacking into default MEMORY storage.".
  • If passing 'consumer' mode without setting storage.type to 'REDIS', the SDK throws an exception with message: "A REDIS storage is required on consumer mode.".

• NOTABLE CHANGE: since version 10.18.0, the SDK has been refactored to use @​splitsoftware/splitio-commons package in order to reuse core modules shared across all JavaScript-based SDKs. Most internal modules have been moved and renamed, but it does not imply a breaking change as long as the library is imported via its main entrypoint (e.g., const { SplitFactory } = require('@splitsoftware/splitio') or import { SplitFactory } from '@splitsoftware/splitio').

10.17.3 (February 25, 2022)

• Updated format for MySegments keys in LocalStorage, keeping backwards compatibility (issue splitio/javascript-client#638).
• Updated some dependencies for vulnerability fixes.

10.17.2 (January 31, 2022)

• Updated some dependencies for vulnerability fixes.
• Bugfixing - Fixed internal handling of Fetch API promise rejection, to avoid unhandled exceptions on some Web browsers (issue splitio/javascript-client#621)

Commits

• 99518dd Merge pull request #664 from splitio/development
• 977ce7f Merge pull request #663 from splitio/update_dependencies
• 02f2a73 updated changelog
• 55cf419 prepare stable release
• 9b2314a put back ci-cd config
• c731fe5 polishing of imports and comments
• c7f6aef Merge pull request #660 from splitio/development
• 9396e4e Merge pull request #661 from splitio/release_v10.18.0
• f843cbe update CHANGELOG entry
• 5fa1b92 Merge pull request #647 from splitio/dependabot/npm_and_yarn/url-parse-1.5.10
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #53.