swagger-jsdoc icon indicating copy to clipboard operation
swagger-jsdoc copied to clipboard

Remove yarn + fix security issues reported by npm audit

Open McFizh opened this issue 10 months ago • 2 comments

This MR contains following changes:

  • Fixes security issues reported by npm audit
  • Removes yarn (makes it easier to maintain package, since there's only one lock file to update)
  • Removes package 'npm-run-all', which hasn't seen update in 6 years
  • Update pipeline to test with node versions from 16.x to 22.x

Note: glob + jest updates raised the minimum node version to 16.x (but even that is already eol, so should not be that big of an issue)

McFizh avatar Mar 06 '25 19:03 McFizh

I would advocate to keep yarn and remove npm (and the package-lock.json) as everything was already pointing to yarn.

but good work, took it to base my fork on

ShaharHD avatar Apr 10 '25 23:04 ShaharHD

I updated this PR a bit.. Node 24 is added to testing matrix and glob version is updated as high as possible while keeping at least node 16 compatibility. Glob 11.x is for node versions 20 and onwards.

Also jest is updated to latest version, so it should be easier to switch to version 30 once it's out. That version should finally remove deprecated inflight dependency (see issue #227)

McFizh avatar May 13 '25 09:05 McFizh

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Jul 12 '25 10:07 stale[bot]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Sep 15 '25 23:09 stale[bot]