Bump tough-cookie and tachometer

[dependabot]

Removes tough-cookie. It's no longer used after updating ancestor dependency tachometer. These dependencies need to be updated together.

Removes tough-cookie

Updates tachometer from 0.4.15 to 0.7.1

Release notes

Sourced from tachometer's releases.

v0.7.0

[0.7.0] 2022-07-15

• [BREAKING] Tachometer is now an ES module binary, so it requires Node 12 or higher.
• Upgraded dependencies and removed unnecessary ones.

v0.6.0

[0.6.0] 2022-07-01

• [BREAKING] Benchmark and root paths are now interpreted relative to the location of the config file, instead of the current working directory.

  For example, a config at path <repo>/benchmarks/foo/tachometer.json that used to look as follows, and had to be run with <repo> as the cwd:

  {
    "root": ".",
    "benchmarks": [
      {
        "url": "benchmarks/foo/index.html"
      }
    ]
  }

  Should now look like this, and can be run from any cwd:

  {
    "root": "../..",
    "benchmarks": [
      {
        "url": "foo.html"
      }
    ]
  }

v0.5.10

• The --horizons flag and horizon config setting has been replaced with --auto-sample-conditions and autoSampleConditions. --horizon will continue to work for backwards compatibility, but please do update to the new name.

• Copyright notice owner changed from "The Polymer Project Authors" to "Google LLC". Trivial reformatting for LICENSE file to match spdx.org version. Source license headers replaced with concise SPDX-style.

... (truncated)

Changelog

Sourced from tachometer's changelog.

[0.7.1] 2024-07-18

• Update jsonwebtoken dependency.

[0.7.0] 2022-07-15

• [BREAKING] Tachometer is now an ES module binary, so it requires Node 12 or higher.
• Upgraded dependencies and removed unnecessary ones.

[0.6.0] 2022-07-01

• [BREAKING] Benchmark and root paths are now interpreted relative to the location of the config file, instead of the current working directory.

  For example, a config at path <repo>/benchmarks/foo/tachometer.json that used to look as follows, and had to be run with <repo> as the cwd:

  {
    "root": ".",
    "benchmarks": [
      {
        "url": "benchmarks/foo/index.html"
      }
    ]
  }

  Should now look like this, and can be run from any cwd:

  {
    "root": "../..",
    "benchmarks": [
      {
        "url": "foo.html"
      }
    ]
  }

[0.5.10] 2021-09-27

• The --horizons flag and horizon config setting has been replaced with --auto-sample-conditions and autoSampleConditions. --horizon will continue to work for backwards compatibility, but please do update to the new name.

• Copyright notice owner changed from "The Polymer Project Authors" to "Google

... (truncated)

Commits

• 1d8775c Release 0.7.1 (#265)
• 2c621b0 Update the jsonwebtoken dependency (#263)
• fc8fda9 Add optional "npmrc" flag to leverage alternative NPM repositories (#258)
• bfea185 Fix links in README.md (#256)
• 9c3ad69 Publish 0.7.0 (#240)
• e6c340a Upgrade tachometer to ES modules, and update dependencies (#239)
• ef7c3f1 Release 0.6.0 (#238)
• dfd623f Interpret paths relative to config file instead of cwd (#237)
• 7bf3c57 fix typos/grammar (#229)
• 4f49cb3 Release 0.5.10 (#227)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.