[chore]: Bump fetch-jsonp from 1.3.0 to 1.4.0

[dependabot]

Bumps fetch-jsonp from 1.3.0 to 1.4.0.

Release notes

Sourced from fetch-jsonp's releases.

v1.4.0

What's Changed

Bug Fix

• crossorigin attribute value corrected: Previously hardcoded to the non-standard string 'true'. Now defaults to 'anonymous' (per HTML spec) when set to true, and also accepts explicit string values like 'use-credentials'. This is a backwards-compatible fix — existing users with crossorigin: true will now get the correct anonymous CORS behavior.

New Feature

• fetchPriority option (#70, #73): Control the priority of the JSONP script request with 'high', 'low', or 'auto'. Widely supported in modern browsers (MDN) and safely ignored in unsupported browsers. Thanks to @​trudbot!

Chore

• Added types field to package.json so npm correctly shows the TS badge instead of the DT badge (#71). Thanks to @​karlhorky!

Full Changelog

https://github.com/camsong/fetch-jsonp/blob/master/HISTORY.md

Changelog

Sourced from fetch-jsonp's changelog.

1.4.0 / 2026-2-27

• fix: crossorigin attribute now correctly defaults to 'anonymous' instead of 'true'; also accepts string values like 'use-credentials'
• feat: add fetchPriority option support ('high' | 'low' | 'auto'), thanks to @​trudbot #73
• chore: add types field to package.json for correct npm TS badge, thanks to @​karlhorky #71

Commits

• a91c44f chore: bump to v1.4.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)