Skip to content

Routine dependency management for clean NPM audit.#356

Merged
theengineear merged 1 commit intomainfrom
update-dependencies
Mar 25, 2026
Merged

Routine dependency management for clean NPM audit.#356
theengineear merged 1 commit intomainfrom
update-dependencies

Conversation

@theengineear
Copy link
Copy Markdown
Collaborator

Of note, we needed to specifically depend on globals once we updated ESLint. It used to be a transitive dependency, but it’s not anymore. This package is just a data blob of variables in different environments.

Comment thread CHANGELOG.md
predicted from developers (#351).

### Fixed
- Explicitly setting `reflect` to `false` now works. Previously, setting this
Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Whoops! Wrote this one twice — just doing some unrelated cleanup. It didn’t feel like it warranted a separate commit / PR…

Comment thread package.json
"esbuild": "0.27.3",
"eslint": "10.0.3",
"eslint-plugin-jsdoc": "62.7.1",
"globals": "17.4.0",
Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Again, this is added explicitly now. We were always importing it in our eslint config… so we should have had this all along, really.

@theengineear
Copy link
Copy Markdown
Collaborator Author

@klebba — FYI, just doing some routine dependency management. I will be bumping our typescript dependency as soon as the Map.prototype.getOrInsert method is supported there. I figured it would make sense to do a little dependency wrangling ahead of that change.

Just doing some routine dev dependency updating. Some notes:

1. New major TS 6.x version (we have to silence some stuff as a result).
2. New major ESLint 10.x version (have to make one dependency explicit).
Comment thread tsconfig.json
"noEmitOnError": true,
"module": "NodeNext" // Approximates browser target.
"module": "NodeNext", // Approximates browser target.
// TODO: #357: Fix strict type errors.
Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I will tackle this one-by-one, elsewhere. Way too much noise to pull it into this PR.

@theengineear theengineear merged commit 7455636 into main Mar 25, 2026
1 check passed
@theengineear theengineear deleted the update-dependencies branch March 25, 2026 22:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant