Merge pull request #3624 from Polymer/https-launchpad

Use https instead of git URL

Author: rictic

packages/wct-local/CHANGELOG.md

@@ -8,6 +8,9 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 <!-- ## Unreleased -->
 <!-- Add unreleased changes here. -->
 
+## Unreleased
+- Use an https URL rather than a git URL for launchpad, hopefully that will be more compatible with https://github.blog/2021-09-01-improving-git-protocol-security-github/
+
 ## [v2.1.6] - 2022-01-06
 - Pin to a version of launchpad without CVE-2021-23330
 

packages/wct-local/package-lock.json

@@ -56,7 +56,7 @@
     "chalk": "^2.3.0",
     "cleankill": "^2.0.0",
     "freeport": "^1.0.4",
-    "launchpad": "git://github.com/418sec/launchpad.git#de5aca11dc16a8e530195281c77614bdbb08e7be",
+    "launchpad": "git+https://github.com/web-padawan/launchpad.git#fdd994d089572e2c2152d70cc74abf497d08d5b7",
     "selenium-standalone": "^6.7.0",
     "which": "^1.0.8"
   },