unstale

npm / fetch-nodeshim

fetch-nodeshim

What changed in fetch-nodeshim 0.4, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-18.

1 security1 new APIs and options4 behavior and defaults13 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.1.1 on npm

fetch-nodeshim 0.419 changes

Security 1

New APIs and options 1

  • Adds configurable connectTimeout to override the connection timeout.

    0.4.9release notes

Behavior and default changes 4

  • The default connection timeout is now also 30s when the request Accept header contains text/html.

    0.4.9release notes

  • The socket is unrefed for a more limited state, refed while the body is being read, and unrefed again when reading stops.

    0.4.4release notes

  • Adds a sane default timeout to http.request.

    0.4.1release notes

  • Automatically creates and uses agents when HTTP_PROXY, HTTPS_PROXY, or NO_PROXY is set.

    0.4.0release notes

Fixes and other changes 13

  • Header casing is preserved when headers are passed as a tuple list or dictionary rather than as a Headers object.

    0.4.10release notes

  • Fixes fetch(new Request(...), init) so that init takes precedence over the request.

    0.4.8release notes

  • Fixes Set-Cookie casing on older Node versions.

    0.4.7release notes

  • For string inputs, an already-set Content-Type is no longer overridden.

    0.4.5release notes

  • Sets Content-Length: 0 when a PATCH response body is null.

    0.4.3release notes

  • Propagates errors for duplex request/response streams and ensures early errors reach the Response stream.

    0.4.3release notes

  • Requests that time out now issue an explicit ETIMEDOUT.

    0.4.3release notes

  • Protects against a missing Symbol.toStringTag.

    0.4.3release notes

  • Fixes a typo in NO_PROXY construction.

    0.4.3release notes

  • Resets requestOptions.agent on retry or redirect.

    0.4.3release notes

  • Fixes Set-Cookie list handling by capturing values with Headers#append.

    0.4.3release notes

  • The incoming socket is unreferenced when the timeout is disabled, preventing body streams that never start from keeping processes alive.

    0.4.2release notes

  • Prevents an outright error when the flag is set and Request, Response, FormData, and Headers are unavailable globally.

    0.4.0release notes