Skip to content

Deps bump#863

Merged
oetr merged 3 commits intomainfrom
deps-bump
Mar 26, 2026
Merged

Deps bump#863
oetr merged 3 commits intomainfrom
deps-bump

Conversation

@oetr
Copy link
Contributor

@oetr oetr commented Mar 26, 2026

No description provided.

oetr added 3 commits March 26, 2026 14:02
Update all root and workspace package dependencies:

- prettier 3.3 -> 3.8, rimraf 5 -> 6, lint-staged 15 -> 16
- @types/node 20 -> 25 (root, fuzzer, instrumentor)
- cmake-js 7 -> 8, node-addon-api 7 -> 8
- yargs 17 -> 18

Yargs 18 is ESM-only, so its named exports like exit()
are not accessible from CJS. Replace yargs.exit() with
process.exit() in the CLI, which does the same thing.

Swap out the ESLint 8 toolchain for ESLint 9 equivalents
in package.json (config migration is in the next commit):
- eslint-plugin-header -> eslint-plugin-headers
- eslint-plugin-import -> eslint-plugin-import-x
- @typescript-eslint/eslint-plugin -> typescript-eslint

Add markdown-it override to 14.1.1 to fix a ReDoS
vulnerability (GHSA-38c4-r59v-3vqw).
Replace .eslintrc.json and .eslintignore with a single
eslint.config.mjs using the new flat config format.

typescript-eslint v8 split ban-types into three rules:
- no-unsafe-function-type (for Function)
- no-wrapper-object-types (for Object, String, etc.)
- no-restricted-types (user-defined)

Update all inline eslint-disable directives to use the
new rule names. Fix one real Object -> object type issue
in transformerInterceptor.ts.

The old header/header plugin is gone; update 5 test files
to use the replacement headers/header-format directive.

Add *.fuzz.{js,ts} to the jest globals config, which the
old config covered via a global env setting.
Node 14-18 are all EOL. Update .nvmrc to v22 and set
the root engine to Node >= 20 for development tooling
(lint-staged 16 needs it for the /v regex flag).

Published packages keep engines >= 14 for end users.
@oetr oetr merged commit 6559e81 into main Mar 26, 2026
14 checks passed
@oetr oetr deleted the deps-bump branch March 26, 2026 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant