npm reported bugs in outdated dependency (strnum/fast-xml-parser)

[nmontavon]

Checkboxes for prior research

• [x] I've gone through Developer Guide and API reference
• [x] I've checked AWS Forums and StackOverflow.
• [x] I've searched for previous similar issues and didn't find any solution.

Describe the bug

the dependency fast-xml-parser needs to be updated in order to fix one of its dependencies (strnum).

Warning The following packages are deprecated:
┖─ npm:[email protected] (This version introduces bugs)

[email protected] /Users/redacted/VSCode/project/front
├─┬ @aws-sdk/[email protected] -> ./node_modules/.deno/@[email protected]/node_modules/@aws-sdk/client-cognito-identity-provider
│ └─┬ @aws-sdk/[email protected] -> ./node_modules/.deno/@[email protected]/node_modules/@aws-sdk/core
│   └─┬ [email protected] -> ./node_modules/.deno/[email protected]/node_modules/fast-xml-parser
│     └── [email protected] deduped -> ./node_modules/.deno/[email protected]/node_modules/strnum
├─┬ [email protected] -> ./node_modules/.deno/[email protected]/node_modules/cognito-srp-helper
│ └─┬ @aws-sdk/[email protected] -> ./node_modules/.deno/@[email protected]/node_modules/@aws-sdk/client-cognito-identity-provider
│   └─┬ @aws-sdk/[email protected] -> ./node_modules/.deno/@[email protected]/node_modules/@aws-sdk/core
│     └─┬ [email protected] -> ./node_modules/.deno/[email protected]/node_modules/fast-xml-parser
│       └── [email protected] deduped -> ./node_modules/.deno/[email protected]/node_modules/strnum
└─┬ [email protected] invalid: "~5.2.2" from node_modules/.deno/@[email protected]/node_modules/@aws-sdk/client-cognito-identity-provider, "~4.2.4" from node_modules/.deno/@[email protected]/node_modules/@unovis/svelte, "5.6.3" from node_modules/.deno/[email protected]/node_modules/ai, "^4.8.4" from node_modules/.deno/[email protected]/node_modules/cognito-srp-helper, "^2.8.3" from node_modules/.deno/[email protected]/node_modules/dayjs, "5.1.3" from node_modules/.deno/[email protected]/node_modules/prettier-plugin-svelte, "^4.8 <4.9" from node_modules/.deno/[email protected]/node_modules/svelte-moveable, "5.6.3" from node_modules/.deno/[email protected]/node_modules/tailwind-variants -> ./node_modules/.deno/[email protected]/node_modules/typescript
  └─┬ [email protected] invalid: "^4.5.1" from node_modules/.deno/[email protected]/node_modules/typescript, "^4.5.1" from node_modules/.deno/[email protected]/node_modules/typescript, "^4.5.1" from node_modules/.deno/[email protected]/node_modules/typescript, "^4.5.1" from node_modules/.deno/[email protected]/node_modules/typescript, "^4.5.1" from node_modules/.deno/[email protected]/node_modules/typescript -> ./node_modules/.deno/[email protected]/node_modules/fast-xml-parser
    └── [email protected] -> ./node_modules/.deno/[email protected]/node_modules/strnum

Regression Issue

• [ ] Select this option if this issue appears to be a regression.

SDK version number

@aws-sdk/package-name@version, ...

Which JavaScript Runtime is this issue in?

Node.js

Details of the browser/Node.js/ReactNative version

deno 2.2.3 / node v23.9.0

Reproduction Steps

install @aws-sdk/[email protected] and its dependencies using any package manager.

Observed Behavior

Warning The following packages are deprecated:
┖─ npm:[email protected] (This version introduces bugs)

This is also reported on npm.

https://www.npmjs.com/package/strnum/v/1.1.0

Expected Behavior

No warnings. ;)

Possible Solution

Update fast-xml-parser dependency.

Additional Information/Context

No response

[timtucker-dte]

Looks like the new 5.x series is backward compatible but adds ESM support and 5.0.8 updates the strnum dependency: https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md

[aBurmeseDev]

Hi @vyconm - thanks for reporting this. I wasn't able to reproduce this error by installing client with npm, yarn, and pnpm. Before further investigation, could you confirm if you're seeing this specifically in Deno? [email protected] -> ./node_modules/.deno/[email protected]/node_modules/strnum

[nmontavon]

@aBurmeseDev we are indeed using deno, which maybe more strictly follows dependency versioning than yarn or npm.

The issue is flagged on npm though, and even more bugs have been fixed in recent versions of strnum.

https://www.npmjs.com/package/strnum/v/1.1.0

[aBurmeseDev]

This doesn't seem like an issue with SDK, please feel free to open a new issue otherwise. Closing this one.

[github-actions[bot]]

This issue is now closed. Comments on closed issues are hard for our team to see. If you need more assistance, please open a new issue that references this one.

[github-actions[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs and link to relevant comments in this thread.