chore: dependency maintenance october 2023

[aldy505]

Bump some deps, defaults to Node 20

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
typescript	5.2.2	filesystem	+0	40.6 MB	typescript-bot
c8	7.13.0...8.0.1	None	+0/-0	38.6 kB	oss-bot
eslint-config-prettier	8.7.0...9.0.0	environment	+1/-1	2.98 MB	lydell
@commitlint/cli	17.4.4...17.7.2	None	+2/-1	40.7 MB	escapedcat
eslint	8.36.0...8.50.0	None	+0/-0	2.96 MB	eslintbot

🚮 Removed packages: rollup@3.19.1

[aldy505]

I don't know why but uvu hangs forever now.

@talentlessguy Is it okay if I move to vitest?

[talentlessguy]

I don't know why but uvu hangs forever now.

@talentlessguy Is it okay if I move to vitest?

if tests hang it's not uvu I think, maybe some promise never resolves or something like that IMO

[aldy505]

I don't know why but uvu hangs forever now.
@talentlessguy Is it okay if I move to vitest?

if tests hang it's not uvu I think, maybe some promise never resolves or something like that IMO

It turns out, upgrading @tinyhttp/app from 2.0.29 to 2.2.0 causes the issue. Let me find out which version started this issue.

[talentlessguy]

I don't know why but uvu hangs forever now.
@talentlessguy Is it okay if I move to vitest?

if tests hang it's not uvu I think, maybe some promise never resolves or something like that IMO

It turns out, upgrading @tinyhttp/app from 2.0.29 to 2.2.0 causes the issue. Let me find out which version started this issue.

Might be a bug in tinyhttp, if you catch it please file an issue on the tinyhttp repo

[aldy505]

Found it, started on 2.0.33, the in-between version (2.0.31 and 2.0.32) works fine.

[talentlessguy]

Also a question — why bump CI to latest Node? I think it instead should be using the oldest supported version

the only problem though is that latest pnpm supports onl Node 18+ afaik

[aldy505]

Also a question — why bump CI to latest Node? I think it instead should be using the oldest supported version

the only problem though is that latest pnpm supports onl Node 18+ afaik

I actually wanted to use a matrix version for Node, yet I don't know how would Coveralls handles that. It should be running Node 18 and Node 20 though.

[talentlessguy]

Also a question — why bump CI to latest Node? I think it instead should be using the oldest supported version

the only problem though is that latest pnpm supports onl Node 18+ afaik

I actually wanted to use a matrix version for Node, yet I don't know how would Coveralls handles that. It should be running Node 18 and Node 20 though.

I think just having Node 18 for CI is okay (Node 20 doesn't contain any breaking changes that could break Malibu tmk)

[talentlessguy]

Until the problem is resolved, let's stick to 2.0.32 of tinyhttp