rushstack icon indicating copy to clipboard operation
rushstack copied to clipboard

[node-core-library] Update fs-extra dependency

Open Toxaris opened this issue 11 months ago • 2 comments
trafficstars

Summary

We are using rush-lib in some of our own tools. rush-lib indirectly depends on [email protected] via node-core-library (see package.json). Since [email protected] was published 6 years ago and newer versions exist, we are getting findings in some compliance checks for open source dependencies.

Additional information

rush-pnpm why --filter one-of-our-internal-tools fs-extra
@microsoft/rush-lib 5.138.0
├─┬ @rushstack/heft-config-file 0.15.7
│ ├─┬ @rushstack/node-core-library 5.9.0
│ │ └── fs-extra 7.0.1
│ └─┬ @rushstack/terminal 0.14.2
│   └─┬ @rushstack/node-core-library 5.9.0
│     └── fs-extra 7.0.1
├─┬ @rushstack/node-core-library 5.9.0
│ └── fs-extra 7.0.1
├─┬ @rushstack/package-deps-hash 4.2.3
│ └─┬ @rushstack/node-core-library 5.9.0
│   └── fs-extra 7.0.1
├─┬ @rushstack/package-extractor 0.9.4
│ ├─┬ @rushstack/node-core-library 5.9.0
│ │ └── fs-extra 7.0.1
│ └─┬ @rushstack/terminal 0.14.2
│   └─┬ @rushstack/node-core-library 5.9.0
│     └── fs-extra 7.0.1
└─┬ @rushstack/rush-amazon-s3-build-cache-plugin 5.138.0
  ├─┬ @rushstack/node-core-library 5.9.0
  │ └── fs-extra 7.0.1
  └─┬ @rushstack/rush-sdk 5.138.0
    ├─┬ @rushstack/node-core-library 5.9.0
    │ └── fs-extra 7.0.1
    ├─┬ @rushstack/package-deps-hash 4.2.3
    │ └─┬ @rushstack/node-core-library 5.9.0
    │   └── fs-extra 7.0.1
    └─┬ @rushstack/terminal 0.14.2
      └─┬ @rushstack/node-core-library 5.9.0
        └── fs-extra 7.0.1

Standard questions

Please answer these questions to help us investigate your issue more quickly:

Question Answer
Package name: @rushstack/node-core-library
Package version? 5.9.0
Operating system? Linux
Would you consider contributing a PR? Yes
Node.js version (node -v)? 20.18.1

Toxaris avatar Dec 12 '24 09:12 Toxaris