Azurite icon indicating copy to clipboard operation
Azurite copied to clipboard

uuid v3 transitive dependency deprecation via @azure/ms-rest-js

Open JakeGinnivan opened this issue 2 years ago • 3 comments

Which service(blob, file, queue, table) does this issue concern?

Entire package

Which version of the Azurite was used?

3.21.0

Where do you get Azurite? (npm, DockerHub, NuGet, Visual Studio Code Extension)

NPM

What's the Node.js version?

v16.19.0

What problem was encountered?

uuid v3 is deprecated, it's referenced through @azure/ms-rest-js which according to a comment posted ~1 year ago that library is not being maintained anymore.

https://github.com/Azure/ms-rest-js/issues/458#issuecomment-1006196462

Steps to reproduce the issue?

NPM install Azurite

Have you found a mitigation/solution?

No

JakeGinnivan avatar Jan 22 '23 05:01 JakeGinnivan

Thanks for reporting this to us.

I see that @azure/ms-rest-js had a new version published about 2months ago, it depends on uuid 8.3.2 which is not deprecated yet. It'd take large efforts to switch REST API dependency. We'll try to upgrade to latest @azure/ms-rest-js first. This may also take some time, we'll update you with any progress.

EmmaZhu avatar Jan 30 '23 08:01 EmmaZhu

Any progress on this? @EmmaZhu

eikomaniac avatar Mar 10 '24 01:03 eikomaniac

Also just checking in @EmmaZhu, would be good to remove this deprecation warning. If there are any security issues found in the current dependency chain it will be problematic to upgrade in a short period.

JakeGinnivan avatar May 23 '24 23:05 JakeGinnivan