Skip to content

Conversation

@jdalrymple
Copy link
Contributor

@jdalrymple jdalrymple commented Sep 30, 2025

What:

Modernized project dependencies and resolved deprecated packages, peer dependency warnings, and security vulnerabilities.

Why:

  • The codecov package was deprecated with a migration plan in place
  • Multiple peer dependency warnings were causing noise during installation
  • Security audit identified 2 low-severity vulnerabilities in transitive dependencies
  • node-fetch dependency was unnecessary given Node.js 22's native fetch support
  • ES module compatibility issues were causing test failures after package updates

How:

Dependency Updates:

  • Removed deprecated codecov package and updated CircleCI config to use official codecov orb
  • Removed unnecessary node-fetch dependency, now using Node.js 22's native fetch
  • Removed typescript dev dependency (not needed for pure JS project)
  • Added pnpm override for tmp@>=0.2.4 to resolve security vulnerability

Configuration Changes:

  • Updated Jest config to support ES modules with --experimental-vm-modules flag
  • Added transformIgnorePatterns for prettier compatibility
  • Modified test script to use NODE_OPTIONS environment variable

Code Updates:

  • Fixed inquirer v12 compatibility by using require('inquirer').default
  • Fixed lint errors (curly braces, logical assignment warnings)
  • Updated test snapshots to reflect prettier formatting changes
  • Fixed conditional logic in test files to avoid ESLint warnings

Infrastructure Updates:

  • Updated CircleCI to use Node.js 22.14 (from 16.17.0) to match engine requirements
  • Migrated CI from yarn to pnpm to match project package manager
  • Added pnpm installation step to CircleCI workflow
  • Removed obsolete .yvmrc file (Yarn version specification no longer needed)

Checklist:

  • Documentation
  • Tests
  • Ready to be merged
  • Added myself to contributors table

@jdalrymple
Copy link
Contributor Author

I know this was a huge overhaul, but would love to get the cli tool up to date 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants