Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resolve deprecated [email protected] dependency #1665

Closed
samayer12 opened this issue Jan 15, 2025 · 1 comment · Fixed by #1749
Closed

Resolve deprecated [email protected] dependency #1665

samayer12 opened this issue Jan 15, 2025 · 1 comment · Fixed by #1749
Assignees
Labels
dependencies Pull requests that update a dependency file
Milestone

Comments

@samayer12
Copy link
Contributor

Describe what should be investigated or refactored

This dependency is deprecated and should be replaced.

npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported

Links to any relevant code

Additional context

In support of #1125

@samayer12 samayer12 added dependencies Pull requests that update a dependency file and removed tech-debt labels Jan 15, 2025
@samayer12 samayer12 changed the title Remove deprecated [email protected] dependency Resolve deprecated [email protected] dependency Jan 15, 2025
@samayer12 samayer12 added the good first issue Good for newcomers label Jan 15, 2025
@samayer12
Copy link
Contributor Author

Here's the output of npm ls glob:

[email protected]
├─┬ [email protected]
│ └─┬ [email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └── [email protected] deduped
├─┬ [email protected]
│ └─┬ @jest/[email protected]
│   ├─┬ @jest/[email protected]
│   │ └── [email protected]
│   ├─┬ [email protected]
│   │ └── [email protected] deduped
│   └─┬ [email protected]
│     └── [email protected] deduped
├─┬ [email protected]
│ └─┬ @kubernetes/[email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └─┬ [email protected]
│         └── [email protected]
├─┬ [email protected]
│ └─┬ @sigstore/[email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └── [email protected]
└─┬ [email protected]
  └─┬ @jest/[email protected]
    └─┬ [email protected]
      └─┬ [email protected]
        └── [email protected] deduped

@samayer12 samayer12 removed the good first issue Good for newcomers label Jan 23, 2025
@cmwylie19 cmwylie19 self-assigned this Jan 30, 2025
@cmwylie19 cmwylie19 moved this from 🆕 New to 👀 In review in Pepr Project Board Jan 30, 2025
@cmwylie19 cmwylie19 added this to the v0.45.0 milestone Jan 30, 2025
github-merge-queue bot pushed a commit that referenced this issue Jan 30, 2025
## Description

By overriding glob, we were able to remove inflight, both were
deprecated. This seems to still work as expected passing all tests.

_Before_

```plaintext
[email protected] /Users/cmwylie19/pepr
├─┬ [email protected]
│ └─┬ [email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └── [email protected] deduped
├─┬ [email protected]
│ └─┬ @jest/[email protected]
│   ├─┬ @jest/[email protected]
│   │ └── [email protected]
│   ├─┬ [email protected]
│   │ └── [email protected] deduped
│   └─┬ [email protected]
│     └── [email protected] deduped
├─┬ [email protected] invalid: "3.3.8" from the root project
│ └─┬ @kubernetes/[email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └─┬ [email protected]
│         └── [email protected]
├─┬ [email protected]
│ └─┬ @sigstore/[email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └── [email protected]
└─┬ [email protected]
  └─┬ @jest/[email protected]
    └─┬ [email protected]
      └─┬ [email protected]
        └── [email protected] deduped
 ```

After

```plaintext

> npm dedup

removed 20 packages, changed 4 packages, and audited 810 packages in 5s

113 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
┌─[cmwylie19@C2WY6FCQVX] - [~/not-pepr/pepr] - [2025-01-30 01:52:06]
└─[0] <git:(test_glob_override afe2d26) > npm ls glob
[email protected] /Users/cmwylie19/not-pepr/pepr
├─┬ [email protected]
│ └─┬ [email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └── [email protected] deduped
├─┬ [email protected]
│ └─┬ @jest/[email protected]
│   ├─┬ @jest/[email protected]
│   │ └── [email protected] overridden
│   ├─┬ [email protected]
│   │ └── [email protected] deduped
│   └─┬ [email protected]
│     └── [email protected] deduped
├─┬ [email protected]
│ └─┬ @kubernetes/[email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └─┬ [email protected]
│         └── [email protected] deduped
├─┬ [email protected]
│ └─┬ @sigstore/[email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └── [email protected] deduped
└─┬ [email protected]
  └─┬ @jest/[email protected]
    └─┬ [email protected]
      └─┬ [email protected]
        └── [email protected] deduped
        
  > npm ls inflight
[email protected] /Users/cmwylie19/not-pepr/pepr
└── (empty)
```

## Related Issue

Fixes #1665 
Fixes #1668 
<!-- or -->
Relates to #

## Type of change

- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [x] Other (security config, docs update, etc)

## Checklist before merging
- [ ] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed
- [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed

Signed-off-by: Case Wylie <[email protected]>
Co-authored-by: Sam Mayer <[email protected]>
@github-project-automation github-project-automation bot moved this from 👀 In review to ✅ Done in Pepr Project Board Jan 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
Status: ✅ Done
Development

Successfully merging a pull request may close this issue.

2 participants