Skip to content

chore: update dependencies and CI Node versions - #59

Merged
joeferner merged 2 commits into
masterfrom
chore/dependency-housekeeping
Nov 14, 2026
Merged

joeferner merged 2 commits into
masterfrom
chore/dependency-housekeeping

Conversation

@joeferner

@joeferner joeferner commented Nov 14, 2026 •

Copy link
Copy Markdown
Owner

Summary

  • Bump devDependencies: @types/node 26.6, eslint 10.15, globals 17.14, typescript-eslint 8.72, vitest 5.1. Lockfile regenerated from scratch.

  • Supersedes Bump source-map-js from 1.2.1 to 1.2.2 #53 (source-map-js 1.2.2), Bump vite from 8.2.2 to 8.3.4 #54 (vite → 8.3.8), Bump @vitest/mocker and vitest #55 (vitest/@vitest/mocker 5.1.0).

  • Add an overrides entry forcing minimatch ^11.0.8 under @typescript-eslint/typescript-estree (GHSA-g3hv-75wg-m249). npm audit now reports 0 vulnerabilities (was 14).

  • TypeScript stays on 6.0.x: typescript-eslint doesn't support TS 7 yet (<6.1.0).

  • CI matrix: drop Node 20 (EOL April 2026, and vitest 5 already requires 22.12+), now 22.x / 24.x / 26.x.

  • Publish workflow runs on Node 24.x.

  • actions/checkout and actions/setup-node v4 → v7.

  • Breaking: engines.node raised from >=20.19.0 to >=22.12.0 (Node 20 is EOL); README updated. Should ship as a minor bump (0.6.0).

  • Fix 9 pre-existing eqeqeq lint errors in bplistParser.ts (all numeric comparisons, no behavior change) and drop an unused eslint-disable directive.

  • CI now runs npm run lint.

Test plan

  • npm run lint
  • npm run typecheck
  • npm test (11/11)
  • npm run smoke (CJS + ESM builds)
  • npm audit clean
  • CI green on 22.x / 24.x / 26.x

🤖 Generated with Claude Code

joeferner and others added 2 commits November 14, 2026 10:20
- Bump devDependencies (@types/node 26.6, eslint 10.15, globals 17.14,
  typescript-eslint 8.72, vitest 5.1) and regenerate the lockfile.
  Supersedes dependabot PRs #53, #54, #55.
- Override minimatch to ^11.0.8 under typescript-estree to resolve
  GHSA-g3hv-75wg-m249.
- CI matrix: drop EOL Node 20, test on 22.x, 24.x, 26.x.
- Publish on Node 24.x.
- Bump actions/checkout and actions/setup-node to v7.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Use strict equality in bplistParser.ts length/type checks (all
  operands are numbers, so behavior is unchanged) and drop an unused
  eslint-disable directive.
- Raise engines.node to >=22.12.0 (Node 20 is EOL); update README.
- Run `npm run lint` in CI.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@joeferner
joeferner merged commit daac511 into master Nov 14, 2026
3 checks passed
@joeferner
joeferner deleted the chore/dependency-housekeeping branch November 14, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant