Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade ava and meow #49

Merged
merged 10 commits into from
Sep 17, 2021
Merged

Upgrade ava and meow #49

merged 10 commits into from
Sep 17, 2021

Conversation

AprilSylph
Copy link
Contributor

Upgrading to ava@latest and meow@v9 eliminates all npm vulnerability warnings. Somehow I was under the impression that there were none following merge of #47, probably due to my hesitance to commit the lockfile, which I have done here.

Copy link
Owner

@fregante fregante left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the PR! I'd ask you two things:

  • move the AVA upgrade into a separate PR (because it means converting the module into ESM) or drop the update altogether since it's not user-facing
  • remove the lockfile since it does not affect npm users

I've been wanting to make a release but I've been swamped.

If you'd like to update every dependency feel free to (except the ones that require ESM, unless you also convert it to ESM), but make sure you're testing the package first.

test/cli.js Show resolved Hide resolved
import stubs from './helpers/stubs';
const test = require('ava');
const util = require('../util');
const stubs = require('./helpers/stubs');
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These should not be changed but instead the the rest of the module should be turned into ESM (only).

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

move the AVA upgrade into a separate PR (because it means converting the module into ESM)

Given that (as far as I can tell, anyway) this syntax does work, couldn't converting everything to ESM come later?

Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd rather not have to change everything to CJS and then back to ESM, but I think it's ok

@fregante fregante changed the title upgrade ava to v3 and meow to v9 Upgrade ava and meow Sep 17, 2021
@fregante fregante merged commit 55d2d6c into fregante:master Sep 17, 2021
@fregante
Copy link
Owner

Cheers April!

@fregante
Copy link
Owner

Since this increases the minimum node version to v12 it will be released as a breaking release in a few days. Feel free to update any other dependencies before then.

@fregante
Copy link
Owner

@fregante
Copy link
Owner

fregante commented Sep 18, 2021

v2.0.0 has been published: https://github.com/fregante/chrome-webstore-upload-cli/releases/tag/v2.0.0

It'd be great if you could test it as well and let me know if it still works without having to change any keys.

@AprilSylph
Copy link
Contributor Author

Yep, my existing keys seem to work just fine!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants