deps: bump workbox-streams from 6.1.5 to 6.3.0

[dependabot]

Bumps workbox-streams from 6.1.5 to 6.3.0.

Release notes

Sourced from workbox-streams's releases.

Workbox v6.3.0 includes a couple of bug fixes and several new features.

🎉 What's New?

Allow precaching "repair" when using subresource integrity

Although unexpected, there are edge cases where the precache might not be in an inconsistent state, most likely due to a developer manually deleting something in DevTools.

When this happens, workbox-precaching defaults to falling-back to using a network response (assuming the device is online) when there's a precaching miss. Up until now, workbox-precaching hasn't attempting to use this network response to repopulate the precache, because there are no guarantees that the network response corresponds to the version of the asset specified in the precache manifest.

However, if the precache entry includes an integrity property, then subresource integrity guarantees that the response does correspond to the same version of the asset in the manifest. So it should be safe to "repair" the cache with that response. #2921

IDB writes use relaxed durability

This small change to the way Workbox writes to IndexedDB should lead to slightly better performance, without any appreciable downsides. #2934

notifyAllClients option in BroadcastCacheUpdate

BroadcastCacheUpdate uses postMessage() to notify all open tabs controlled by the current service worker about a cache update. This default behavior is not changing.

Setting notifyAllClients: false when configuring BroadcastCacheUpdate and the associated plugin will result in postMessage() only communicating the update to the specific window client that triggered the fetch request which resulted in the cache update. #2920

All WorkboxEvents TypeScript types are now exported

This enhancement makes it easier to use TypeScript to write workbox-window event handlers. #2919

Debug logging when caching responses with Vary: headers

The presence of Vary: headers on a cached Response can make it difficult to properly match and delete cache entries. To make it clearer to developers when this is happening, the development builds of Workbox will now log a message to the console when a Response that's being cached includes a Vary: header. #2916

🐛 What's Fixed?

workbox-cli

• Update to chokidar dependency, for better node compatibility and to eliminate security warnings. #2913

workbox-precaching

• Preserve all request headers in PrecacheCacheKeyPlugin. #2914

Workbox v6.2.4

🐛 What's Fixed?

• Passing in functions for onSync and handler in generateSW's runtimeCaching should not fail validation. #2911

Workbox v6.2.3

🐛 What's Fixed?

• Move @types/trusted-types to dependencies of workbox-window #2909

... (truncated)

Commits

• 03055e6 v6.3.0
• bdf592c Tweak to parserOptions
• 1fe537f Fix formatting
• f7050da Re-add build step
• 669df58 changing durability to relaxed (#2934)
• 43d56d5 Update to cache@v2 (#2935)
• 63ea2ca Enable prettier (#2929)
• 70bfa09 Allow precaching "repair" when using subresource integrity (#2921)
• 094d081 Use Application Default Credentials (#2918)
• 5da8924 Debug logging when caching Vary: headers (#2916)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #889.