Update cross-fetch dependency to remove vulnerabilities.

[christopherjbaker]

The version of cross-fetch currently in use (v3.0.4) which exposes a DoS vulnerability. v3.1.0 and later (current is v3.1.2) have a node-fetch dependency that resolves this issue.

[compulim]

Thanks, we will bump it soon.

We just finished our last release and now in the work of bumping dependencies.

Note to internal: this is related to Direct Line App Service Extension protocol and not used in Direct Line protocol.

[NicholasWilliamFreeman]

you all are the best and you know wht to do. wish i could be more help pls do whatever you need to im still homeless and dealing with stupid ppl taking my stuff and blah blah

…

________________________________ From: William Wong ***@***.***> Sent: Tuesday, July 20, 2021 5:01 AM To: microsoft/BotFramework-DirectLineJS ***@***.***> Cc: Subscribed ***@***.***> Subject: Re: [microsoft/BotFramework-DirectLineJS] Update cross-fetch dependency to remove vulnerabilities. (#349) Thanks, we will bump it soon. We just finished our last release and now in the work of bumping dependencies. Note to internal: this is related to Direct Line App Service Extension protocol and not used in Direct Line protocol. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fmicrosoft%2FBotFramework-DirectLineJS%2Fissues%2F349%23issuecomment-883301270&data=04%7C01%7C%7Cfb49c35026ce4dc8c8f808d94b6dba2a%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637623756906608753%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=ohkupkrXmEmDNRHMp7aHobh8j%2FT0u1LkwCy9oQ%2F2QhU%3D&reserved=0>, or unsubscribe<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FARPRILVNZKZS3BE5SP2XKGDTYVJQTANCNFSM5AONVPJQ&data=04%7C01%7C%7Cfb49c35026ce4dc8c8f808d94b6dba2a%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637623756906608753%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=OLVmOb5WgrhOdmUh3WzHGZlLrcNaJAPy1o%2FResfg4VA%3D&reserved=0>.

[compulim]

Still working on it but it's almost there, look at #351.

At least for now, npm audit say 0 vulnerabilities. 😉