Update cross-fetch to 3.1.8

[gblessy]

Cross-fetch before version 3.1.5 uses node-fetch version 2.6.1, which has security vulnerability. In order to address this we need to update cross-fetch to version 3.1.8, or if it is possible to version 4.0.0