From 0bf4753995375e5c4dec30b342c57954a74186e0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C3=ABl=20Zasso?= Date: Fri, 12 Sep 2025 09:32:02 +0200 Subject: [PATCH 1/6] chore: update non-major dependencies --- package.json | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/package.json b/package.json index c7308b4a..41a6c1c0 100644 --- a/package.json +++ b/package.json @@ -36,22 +36,22 @@ "dependencies": { "@npmcli/package-json": "^7.0.0", "async": "^3.2.6", - "bl": "^6.0.16", - "chalk": "^5.4.0", + "bl": "^6.1.3", + "chalk": "^5.6.2", "columnify": "^1.6.0", - "execa": "^9.5.2", + "execa": "^9.6.0", "lodash": "^4.17.21", "normalize-git-url": "^3.0.2", - "npm-package-arg": "^12.0.1", + "npm-package-arg": "^12.0.2", "npm-which": "^3.0.1", - "pnpm": "^9.15.1", + "pnpm": "^9.15.9", "root-check": "^2.0.0", - "semver": "^7.6.3", - "strip-ansi": "^7.1.0", - "supports-color": "^10.0.0", + "semver": "^7.7.2", + "strip-ansi": "^7.1.2", + "supports-color": "^10.2.2", "tar": "^7.4.3", "uid-number": "0.0.6", - "undici": "^6.21.0", + "undici": "^6.21.3", "which": "^5.0.0", "winston": "^3.17.0", "xml-sanitizer": "^2.0.2", @@ -60,12 +60,12 @@ "yarn": "^1.22.22" }, "devDependencies": { - "@eslint/js": "^9.17.0", - "ansi-regex": "^6.1.0", - "eslint": "^9.17.0", - "eslint-config-prettier": "^9.1.0", - "globals": "^15.14.0", - "prettier": "^3.4.2", + "@eslint/js": "^9.35.0", + "ansi-regex": "^6.2.2", + "eslint": "^9.35.0", + "eslint-config-prettier": "^9.1.2", + "globals": "^15.15.0", + "prettier": "^3.6.2", "string-to-stream": "^3.0.1", "tap": "^20.0.3", "tap-parser": "^17.0.0", From ba58bbe49917961c0728d12ab49b90d71db26a0b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C3=ABl=20Zasso?= Date: Fri, 12 Sep 2025 09:39:44 +0200 Subject: [PATCH 2/6] chore: update yargs to v18 Refs: https://github.com/yargs/yargs/releases/tag/v18.0.0 --- lib/bin/citgm-all.js | 2 +- lib/bin/citgm.js | 2 +- package.json | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/bin/citgm-all.js b/lib/bin/citgm-all.js index 821dbc6e..23c06f3f 100755 --- a/lib/bin/citgm-all.js +++ b/lib/bin/citgm-all.js @@ -45,7 +45,7 @@ const yargs = commonArgs() .example('citgm-all --includeTags express', 'Only test express.') .example('citgm-all --excludeTags native', "Don't test native modules."); -const app = yargs.argv; +const app = yargs.parse(); const log = logger({ level: app.verbose, diff --git a/lib/bin/citgm.js b/lib/bin/citgm.js index 1cd47fa6..f2911566 100755 --- a/lib/bin/citgm.js +++ b/lib/bin/citgm.js @@ -14,7 +14,7 @@ const yargs = commonArgs().usage('citgm [options] ').option('sha', { description: 'Install module from commit-sha, branch or tag' }); -const app = yargs.argv; +const app = yargs.parse(); mod = app._[0]; diff --git a/package.json b/package.json index 41a6c1c0..315b1f8b 100644 --- a/package.json +++ b/package.json @@ -56,7 +56,7 @@ "winston": "^3.17.0", "xml-sanitizer": "^2.0.2", "xmlbuilder": "^15.1.1", - "yargs": "^17.7.2", + "yargs": "^18.0.0", "yarn": "^1.22.22" }, "devDependencies": { From b5abe9165859db615fd5d8cfd40cc61147bc7fd4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C3=ABl=20Zasso?= Date: Fri, 12 Sep 2025 10:01:41 +0200 Subject: [PATCH 3/6] chore: update undici to v7 --- lib/grab-project.js | 6 +++++- package.json | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/lib/grab-project.js b/lib/grab-project.js index 535c1755..f76a83b5 100644 --- a/lib/grab-project.js +++ b/lib/grab-project.js @@ -107,6 +107,10 @@ export async function grabProject(context) { }); } +const downloadAgent = new undici.Agent().compose( + undici.interceptors.redirect({ maxRedirections: 5 }) +); + async function downloadPackage(packageUrl, context, timeout) { const filename = path.basename(packageUrl); const out = path.join(context.path, filename); @@ -114,7 +118,7 @@ async function downloadPackage(packageUrl, context, timeout) { const request = await undici.request(packageUrl, { headersTimeout: timeout, bodyTimeout: timeout, - maxRedirections: 5 + dispatcher: downloadAgent }); await pipeline(request.body, createWriteStream(out)); diff --git a/package.json b/package.json index 315b1f8b..fdd3c407 100644 --- a/package.json +++ b/package.json @@ -51,7 +51,7 @@ "supports-color": "^10.2.2", "tar": "^7.4.3", "uid-number": "0.0.6", - "undici": "^6.21.3", + "undici": "^7.16.0", "which": "^5.0.0", "winston": "^3.17.0", "xml-sanitizer": "^2.0.2", From d485a15f547e3735f40069223ac92b1687f15ff4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C3=ABl=20Zasso?= Date: Fri, 12 Sep 2025 10:06:47 +0200 Subject: [PATCH 4/6] chore: update pnpm to v10 I can't really test it because we have no package in the lookup with "pnpm": true. Refs: https://github.com/pnpm/pnpm/releases/tag/v10.0.0 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index fdd3c407..19b3c8bb 100644 --- a/package.json +++ b/package.json @@ -44,7 +44,7 @@ "normalize-git-url": "^3.0.2", "npm-package-arg": "^12.0.2", "npm-which": "^3.0.1", - "pnpm": "^9.15.9", + "pnpm": "^10.15.1", "root-check": "^2.0.0", "semver": "^7.7.2", "strip-ansi": "^7.1.2", From 6a42f1f374c56057dd8ef754a95e04c4f8a295d1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C3=ABl=20Zasso?= Date: Fri, 12 Sep 2025 10:10:26 +0200 Subject: [PATCH 5/6] chore: update npm-package-arg to v13 Refs: https://github.com/npm/npm-package-arg/releases/tag/v13.0.0 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 19b3c8bb..e26e71f0 100644 --- a/package.json +++ b/package.json @@ -42,7 +42,7 @@ "execa": "^9.6.0", "lodash": "^4.17.21", "normalize-git-url": "^3.0.2", - "npm-package-arg": "^12.0.2", + "npm-package-arg": "^13.0.0", "npm-which": "^3.0.1", "pnpm": "^10.15.1", "root-check": "^2.0.0", From 323573d89460043b7d055e0f4b2afcfff6d974ae Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C3=ABl=20Zasso?= Date: Fri, 12 Sep 2025 10:12:35 +0200 Subject: [PATCH 6/6] chore: update major dev dependencies --- package.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index e26e71f0..e0433deb 100644 --- a/package.json +++ b/package.json @@ -63,12 +63,12 @@ "@eslint/js": "^9.35.0", "ansi-regex": "^6.2.2", "eslint": "^9.35.0", - "eslint-config-prettier": "^9.1.2", - "globals": "^15.15.0", + "eslint-config-prettier": "^10.1.8", + "globals": "^16.4.0", "prettier": "^3.6.2", "string-to-stream": "^3.0.1", - "tap": "^20.0.3", - "tap-parser": "^17.0.0", + "tap": "^21.1.0", + "tap-parser": "^18.0.0", "xml2js": "^0.6.2" }, "prettier": {