Deprecated `glob` version used

[andenacitelli]

Overview

I use @redocly/cli as a linting step against the OpenAPI spec in my project.

pnpm warns me of deprecated subdependencies in my project:

$ pnpm i
 WARN  2 deprecated subdependencies found: glob@7.2.3, inflight@1.0.6

Using pnpm why, the glob one seems to come from @redocly/cli:

$ pnpm why glob@7.2.3
...
devDependencies:
@redocly/cli 1.25.11
└── glob 7.2.3

And notably, the other deprecated subdependency (inflight@1.0.6) itself comes through the deprecated glob version (which is potentially why the glob version was deprecated)

$ pnpm why inflight@1.0.6
...
devDependencies:
@redocly/cli 1.25.11
└─┬ glob 7.2.3
  └── inflight 1.0.6

Desired Fix

Bump the used version of glob to a non-deprecated version.

Versions

• @redocly/cli@1.25.11, latest at time of issue submission
• M2 Mac, likely irrelevant

[tatomyr]

Thanks @andenacitelli for letting us know!

[matthieuLepetit]

Hey!
I'm interesting about an update, I'm using @redocly/cli@1.27.0

└─┬ @redocly/cli@1.27.0
└─┬ glob@7.2.3
└── inflight@1.0.6

I would like to adress this warning about inflight

npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.

Thanks!

[tatomyr]

Hey @matthieuLepetit, it is on our to-do list. We just don't have enough bandwidth to work on it yet.

[matthieuLepetit]

Hi @tatomyr thank you for your quick update !

I just made a PR #1843

I hope I followed correctly your conventions.

If you have some bandwith for some review do not hesitate.

Have a great day !

[tatomyr]

Thanks, @matthieuLepetit! The main thing here is to test if it doesn’t break anything for us. I'll be able to do that a bit later this week (I hope).