JSCO-71: Update stream-json to 3.x (#4)

Changes
-------
* Bumpded stream-json to ^3.7.0 to resolve CVE-2026-71429
* Removed @types/stream-json (3.x ships its own types)
* Switched to parserStream() as 3.x parser() no longer returns a Node
  stream
* Updated Node.js min version = 22.12 as stream-json 3.x is ESM-only and
  requires Node >= 22

Author: thejcfactor

lib/queryexecutor.ts

@@ -24,9 +24,7 @@ import {
   QueryScanConsistency,
 } from './querytypes.js'
 import * as http from 'node:http'
-import stream_json from 'stream-json'
-const { parser } = stream_json
-import type { Parser } from 'stream-json'
+import { parserStream } from 'stream-json'
 import { pipeline } from 'node:stream'
 import { runWithRetry } from './retries.js'
 import { OperationalInsightsError } from './errors.js'
@@ -227,7 +225,7 @@ export class QueryExecutor {
       return this._handleNonSuccessfulStatusCode(res, reject)
     }
 
-    const jsonTokenizer: Parser = parser()
+    const jsonTokenizer = parserStream()
     const jsonTokenParser = new JsonTokenParserStream()
     const effectiveDeserializer = deserializer ?? this._deserializer
     const queryStream = new QueryResultStream(

package-lock.json

@@ -4,7 +4,7 @@
   },
   "description": "The official Couchbase Node.js Operational Insights Client Library.",
   "engines": {
-    "node": ">=16"
+    "node": ">=22.12"
   },
   "homepage": "https://www.couchbase.com/developers/sdks",
   "keywords": [
@@ -33,7 +33,7 @@
   "license": "Apache-2.0",
   "name": "couchbase-operational-insights",
   "dependencies": {
-    "stream-json": "^1.9.1"
+    "stream-json": "^3.7.0"
   },
   "overrides": {
     "diff": "^9.0.0",
@@ -49,7 +49,6 @@
     "@types/debug": "^4.1.13",
     "@types/mocha": "^10.0.10",
     "@types/node": "^20.14.5",
-    "@types/stream-json": "^1.7.8",
     "@typescript-eslint/eslint-plugin": "^8.54.0",
     "@typescript-eslint/parser": "^8.54.0",
     "chai": "^6.2.2",

package.json

@@ -15,8 +15,7 @@
  *  limitations under the License.
  */
 
-import pkg from 'stream-json'
-const { parser } = pkg
+import { parserStream } from 'stream-json'
 import { pipeline, Readable } from 'node:stream'
 import { assert } from 'chai'
 import { harness } from './harness.js'
@@ -46,7 +45,7 @@ describe('JsonTokenParserStream', function () {
         resolve({ rows, errorsItems, stack: jsonParser.stack.pop() })
       })
 
-      pipeline(Readable.from([jsonString]), parser(), jsonParser, (err) => {
+      pipeline(Readable.from([jsonString]), parserStream(), jsonParser, (err) => {
         if (err) {
           reject(err)
         }