Deprecation of v10.1.5, v10.1.6, v10.1.7, v10.1.8, v10.1.9

[achrinza]

Deprecation of v10.1.5, v10.1.6, v10.1.7, v10.1.8, v10.1.9

Subscribe to this issue to receive critical updates on this advisory.

Summary

Applies to:

• @achrinza/node-ipc@^10

Deprecated:

• @achrinza/node-ipc@10.1.5
• @achrinza/node-ipc@10.1.6
• @achrinza/node-ipc@10.1.7
• @achrinza/node-ipc@10.1.8
• @achrinza/node-ipc@10.1.9

Replacement:

• @achrinza/node-ipc@10.1.10

Description

Out of an abundance of caution, v10.1.5, v10.1.6, v10.1.7, v10.1.8, v10.1.9 have been deprecated in favor of v10.1.10 as they contained nested transient production dependencies that are managed by @/riaevangelist (The original author of node-ipc).

The offending transient development dependencies are:

• @achrinza/node-ipc@10.1.5/10.1.6/10.1.7/10.1.8/10.1.9
  • strong-type@1.1.8
    • 1.1.8
      • vanilla-test@*

v10.1.10 resolves this issue by replacing strong-type@1.1.8 with @achrinza/strong-type, which depends on pinned versions of @node-ipc/vanilla-test. There are no functional code changes in v10.1.10.

At the time of writing, we have no reason to believe that any of these dependencies had any malicious code. However, this may change in the future and we strongly recommend upgrading the v10 version range to ^10.1.10.

References

• chore: support Node.js v21 #56
• 78c84ea