refactor: remove clonedeep dependency

This replacement with a shallow clone might look odd, but only one
value at the root level is mutated. Also, because of a quirk with
how clonedeep works with the AssetCss and AssetJs classes in
podium utils, the entries in the css and js arrays weren't actually
cloned – instead the values were copied.

See podium-lib/utils#289 for a more thorough
explanation with links to code.

Author: wkillerud

lib/resolver.cache.js

@@ -1,4 +1,3 @@
-import clonedeep from 'lodash.clonedeep';
 import abslog from 'abslog';
 import assert from 'assert';
 
@@ -36,7 +35,7 @@ export default class PodletClientCacheResolver {
             if (outgoing.status !== 'stale') {
                 const cached = this.#registry.get(outgoing.name);
                 if (cached) {
-                    outgoing.manifest = clonedeep(cached);
+                    outgoing.manifest = { ...cached };
                     outgoing.status = 'cached';
                     this.#log.debug(
                         `loaded manifest from cache - resource: ${outgoing.name}`,

package-lock.json

@@ -97,7 +97,6 @@
     "@podium/utils": "5.5.0",
     "abslog": "2.4.4",
     "http-cache-semantics": "^4.0.3",
-    "lodash.clonedeep": "^4.5.0",
     "ttl-mem-cache": "4.1.0",
     "undici": "6.21.3"
   },