build(deps): bump @splitsoftware/splitio from 10.17.1 to 10.21.0

[dependabot]

Bumps @splitsoftware/splitio from 10.17.1 to 10.21.0.

Changelog

Sourced from @​splitsoftware/splitio's changelog.

10.21.0 (July 22, 2022)

• Added autoRequire configuration option to the Google Analytics to Split integration, which takes care of requiring the splitTracker plugin on trackers dynamically created by Google tag managers (See https://help.split.io/hc/en-us/articles/360040838752#set-up-with-gtm-and-gtag.js).
• Updated browser listener to push remaining impressions and events on 'visibilitychange' and 'pagehide' DOM events, instead of 'unload', which is not reliable in modern mobile and desktop Web browsers.
• Updated the synchronization flow to be more reliable in the event of an edge case generating delay in cache purge propagation, keeping the SDK cache properly synced.
• Updated some dependencies for vulnerability fixes.
• Bugfixing - Moved js-yaml dependency from @​splitsoftware/splitio-commons to avoid resolution to an incompatible version on certain npm versions when installing third-party dependencies that also define js-yaml as transitive dependency (Related to issue splitio/javascript-client#662).

10.20.0 (June 29, 2022)

• Added a new config option to control the tasks that listen or poll for updates on feature flags and segments, via the new config sync.enabled . Running online Split will always pull the most recent updates upon initialization, this only affects updates fetching on a running instance. Useful when a consistent session experience is a must or to save resources when updates are not being used.
• Updated telemetry logic to track the anonymous config for user consent flag set to declined or unknown.
• Updated submitters logic, to avoid duplicating the post of impressions to Split cloud when the SDK is destroyed while its periodic post of impressions is running.

10.19.1 (Jun 13, 2022)

• Updated eventsource dependency range to ^1.1.2 to avoid a vulnerability and dependency resolution to a vulnerable version of url-parse transitive dependency.
• Bugfixing - Updated submitters logic, to avoid dropping impressions and events that are being tracked while POST request is pending.

10.19.0 (May 24, 2022)

• Added scheduler.telemetryRefreshRate property to SDK configuration, and deprecated scheduler.metricsRefreshRate property.
• Updated SDK telemetry storage, metrics and updater to be more effective and send less often.
• Bugfixing - Updated default values for scheduler.impressionsRefreshRate config parameter: 300s for OPTIMIZED impression mode and 60s for DEBUG impression mode, in both Browser and NodeJS (previously it was 60s and 300s in Browser and NodeJS respectively, equal for DEBUG and OPTIMIZED impression modes).

10.18.2 (May 6, 2022)

• Bugfixing - Removed "ip" dependency to use an inline copy of it that fixes an error when using it in Node v18 (indutny/node-ip#113).

10.18.1 (April 20, 2022)

• Updated some dependencies for vulnerability fixes.
• Bugfixing - Updated @​splitsoftware/splitio-commons package to avoid an error when requiring some third-party dependencies used by the package (Related to issue splitio/javascript-client#662).
• Bugfixing - Updated ready method to rejects the promise with an Error object instead of a string value (Related to issue splitio/javascript-client#654).

10.18.0 (April 7, 2022)

• Added user consent feature to allow delaying or disabling the data tracking from SDK until user consent is explicitly granted or declined. Read more in our docs.

• Added scheduler.impressionsQueueSize property to SDK configuration to limit the amount of impressions tracked in memory. Read more in our docs.

• Added support to accept TLS configuration options to the Redis storage in NodeJS. Read more in our docs.

• Updated type definitions to specialize the type of the storage.options object for Redis storage in NodeJS.

• Updated some dependencies for vulnerability fixes.

• Bugfixing - Updated internal isObject utility function, to avoid unexpected behaviors on frameworks and libraries that uses multiple VM contexts, like NuxtJS dev server.

• Bugfixing - Logging settings (i.e., the debug SDK configuration param and factory logger methods) are configurable per factory instance, instead of affecting all factories globally.

• Bugfixing - Fixed an issue with connectionTimeout options params of Redis storage, that was being ignored and not passed down to the underlying ioredis client.

• Bugfixing - Updated the validation of some SDK configuration params to log errors and throw exceptions with clear descriptions of the invalid setup:

  • If passing a non-string value to sync.impressionsMode, the SDK logs the error: "you passed an invalid impressionsMode config param. It should be one of the following values: 'OPTIMIZED', 'DEBUG'. Defaulting to 'OPTIMIZED'.".
  • If passing 'REDIS' storage type without setting mode to 'consumer', the SDK logs the error: "The provided REDIS storage is invalid for this mode. It requires 'consumer' mode. Fallbacking into default MEMORY storage.".
  • If passing 'consumer' mode without setting storage.type to 'REDIS', the SDK throws an exception with message: "A REDIS storage is required on consumer mode.".

• NOTABLE CHANGE: since version 10.18.0, the SDK has been refactored to use @​splitsoftware/splitio-commons package in order to reuse core modules shared across all JavaScript-based SDKs. Most internal modules have been moved and renamed, but it does not imply a breaking change as long as the library is imported via its main entrypoint (e.g., const { SplitFactory } = require('@splitsoftware/splitio') or import { SplitFactory } from '@splitsoftware/splitio').

10.17.3 (February 25, 2022)

• Updated format for MySegments keys in LocalStorage, keeping backwards compatibility (issue splitio/javascript-client#638).
• Updated some dependencies for vulnerability fixes.

... (truncated)

Commits

• 78c667f Merge pull request #697 from splitio/development
• 3761045 Merge pull request #698 from splitio/release_v10.21.0
• 97b4b70 upgrade js-commons
• 9653309 Merge pull request #683 from splitio/ga_auto_require
• 6a91d91 update changelog entry
• 006d164 stable release version
• a9e2a54 Merge branch 'development' into ga_auto_require
• 7c60f5e Merge pull request #695 from splitio/refactor_localhostfromfile
• 7895ee6 restore ci-cd
• 04ecd9a added js-yaml dep and LocalhostFromFile module
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #89.