Update dependency readdirp to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
readdirp	3.6.0 → 5.0.0

---

Release Notes

paulmillr/readdirp (readdirp)

v5.0.0

Compare Source

• Make the package ESM-only. Reduces on-disk package size.
• Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs
• Increase security of NPM releases. Switch to token-less Trusted Publishing, with help of jsbt
• Switch compilation mode to isolatedDeclaration-based typescript for simplified auto-generated docs

New Contributors

• @​ExplodingCabbage made their first contribution in #​206

Full Changelog: paulmillr/readdirp@4.1.2...5.0.0

v4.1.2

Compare Source

What's Changed

• Fix broken stream on normal flow error by @​Chocobozzz in #​205

New Contributors

• @​Chocobozzz made their first contribution in #​205

Full Changelog: paulmillr/readdirp@4.1.1...4.1.2

v4.1.1

Compare Source

Fix invalid "type": "module" in package.json. Closes gh-203

Full Changelog: paulmillr/readdirp@4.1.0...4.1.1

v4.1.0

Compare Source

• Add Deno and Bun support
• Publish to JSR
• Bump min. nodejs version from 14.16 to 14.18
• fix(#​201): typings by @​KillerCodeMonkey in #​202

New Contributors

• @​KillerCodeMonkey made their first contribution in #​202

Full Changelog: paulmillr/readdirp@4.0.2...4.1.0

v4.0.2

Compare Source

• Improve compatibility with graceful-fs and reduce amount of EMFILE errors by switching to async stat methods
• Remove fileFilter "array of strings" from readme by @​karlhorky in #​198
• improve typing for readdirpPromise by @​yuheiy in #​199

New Contributors

• @​karlhorky made their first contribution in #​198
• @​yuheiy made their first contribution in #​199

Full Changelog: paulmillr/readdirp@4.0.1...4.0.2

v4.0.1

Compare Source

Quick fix for invalid esm imports.

Full Changelog: paulmillr/readdirp@4.0.0...4.0.1

v4.0.0

Compare Source

• Rewrite in typescript
• Support hybrid common.js / esm modules
• Remove glob support and all dependencies
• Increase minimum node.js from v8 to v14
• Make sure you're using let {readdirp} = require('readdirp') in common.js

Full Changelog: paulmillr/readdirp@3.6.0...4.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[kilo-code-bot]

CRITICAL: Breaking change - readdirp v5.0.0 is ESM-only and incompatible with CommonJS

This upgrade introduces multiple breaking changes that will cause the application to fail:

1. ESM-only module: readdirp v5.0.0 is ESM-only and cannot be loaded with require(). The entire codebase uses CommonJS (require('readdirp') in app.js:14).

2. Node.js version requirement: v5.0.0 requires Node.js v20.19+. While CI uses Node.js 22, the Docker container uses Alpine 3.22.2's default Node.js version which needs verification.

3. Migration path: To use v5.0.0, the project would need to:

   • Convert to ESM (change all require() to import)
   • Add "type": "module" to package.json
   • Update all file extensions or module resolution
   • Verify Alpine 3.22.2 provides Node.js v20.19+

Recommendation: Stay on readdirp v3.x or upgrade to v4.x (which supports hybrid CommonJS/ESM) until the project is ready to migrate to ESM.

[kilo-code-bot]

Code Review Summary

Status: 2 Issues Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	2
WARNING	0
SUGGESTION	0

Issue Details (click to expand)

CRITICAL

File	Line	Issue
package.json	32	Breaking change - readdirp v5.0.0 is ESM-only

Other Observations (not in diff)

Issues found in unchanged code that cannot receive inline comments:

File	Line	Issue
app.js	186	CRITICAL: API breaking change - readdirp.promise() was removed in v4.0.0. In v5, readdirp returns an async iterable by default. The code needs to be updated from await readdirp.promise('/assets/.') to use the new async iteration API: const files = []; for await (const entry of readdirp('/assets/.')) { files.push(entry); }

Files Reviewed (1 file)

• package.json - 2 issues (1 in diff, 1 related API change)

---

Fix these issues in Kilo Cloud