Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

aggregated pending changes #31

Merged
merged 11 commits into from
Jul 10, 2021
Merged

aggregated pending changes #31

merged 11 commits into from
Jul 10, 2021

Conversation

pabigot
Copy link
Owner

@pabigot pabigot commented Jul 10, 2021

Updates a lot of dependent packages to avoid security issues, unmaintained versions and packages, and fixes style issues that are newly diagnosed. Also updates the Travis integration to the active server.

travis-ci.com replaces travis-ci.org, which is no longer active.  Also
update the configuration for modern Node versions and to support
testing other branches.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Newer versions of Node.js emit deprecation warnings when using Buffer
constructors directly.  Replace new Buffer() with Buffer.from.

See: https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Versions 4 and 5 reached maintenance end-of-life over three years ago,
shortly after the last major release of this package.  As these have
known security bugs, and an upcoming enhancement would require extra
code to work around lack of offset/length construction arguments if
they were to be supported, just drop them.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
A test case added in 2017 used BDD instead of TDD style naming, which
worked in older versions of mocha but doesn't now.  Replace with
consistent naming.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
mocha has a dependency on yargs which only supports actively
maintained Node.js releases, which means they outlaw 6 and 8.  At the
moment they're OK with 10, but only because they haven't released
since it reached EOL on 2021-04-30.

Drop the versions that won't build in travis as of today.  We'll have
to test manually to confirm old Node.js release pass.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
* jsdoc ~3.5.5 has security vulnerabilities; use the latest.
* mocha ~5.0.5 has security vulnerabilities in dependencies; use the latest.

This resolves all current npm audit diagnostics.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
istanbul is no longer maintained; replace it with its successor.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Convert to const two uses of let that didn't change the variable after
it was declared.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Found by inspection and by updated eslint rules.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
These were pretty old, and didn't need to be locked down quite so
hard.  Update them, then deal with the fallout including the need to
have exceptions for the existing indentation.  A subsequent commit
might tighten these back up.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
This is recommended to be in the managed sources, so add it.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
@coveralls
Copy link

Coverage Status

Coverage remained the same at 100.0% when pulling 93dfbe0 on pu into 5c58a22 on next.

@jstarry
Copy link

jstarry commented Jul 10, 2021

Changes look good to me

@pabigot pabigot merged commit 93dfbe0 into next Jul 10, 2021
@pabigot
Copy link
Owner Author

pabigot commented Jul 10, 2021

Changes look good to me

Thanks; merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants