sentry-wizard icon indicating copy to clipboard operation
sentry-wizard copied to clipboard

Outdated Dependency `punycode`

Open Lms24 opened this issue 1 year ago • 2 comments

Reported internally, we use an outdated dependency:

Image

Dependency chain:

=> Found "[email protected]"
info Reasons this module exists
   - "eslint#ajv#uri-js" depends on it
   - Hoisted from "eslint#ajv#uri-js#punycode"

Lms24 avatar Sep 06 '24 13:09 Lms24

Bumping eslint should do the trick. I'm gonna give this a quick try

Lms24 avatar Sep 06 '24 13:09 Lms24

So this was a bit tricky to determine but I think I now got to the botttom of this warning:

Image

whatwg-url imports the node native version of punycode which is deprecated. Dependency tree of whatwg-url

└─> npm ls whatwg-url                                       
└─┬ @sentry/[email protected]
  └─┬ @sentry/[email protected]
    └─┬ [email protected]
      └── [email protected]

Actually, even with the newest eslint version, this is still an open issue for anyone using Node 21/22: https://github.com/eslint/eslint/issues/17733.

So looks like we need to resolve this in Sentry CLI 🤔

Lms24 avatar Sep 06 '24 14:09 Lms24

Closing this in favor of the tracking issue over at sentry-cli: https://github.com/getsentry/sentry-cli/issues/1810

andreiborza avatar Dec 10 '24 11:12 andreiborza