Skip to content

Upgrade 'xo' to 1.2.3 (from 0.56) and Node to 20.17#83

Open
GrahamLea wants to merge 1 commit intosindresorhus:mainfrom
GrahamLea:upgrade-xo-and-node
Open

Upgrade 'xo' to 1.2.3 (from 0.56) and Node to 20.17#83
GrahamLea wants to merge 1 commit intosindresorhus:mainfrom
GrahamLea:upgrade-xo-and-node

Conversation

@GrahamLea
Copy link

This results in the dependency tree summary moving from 6 high severity vulnerabilities to 3 low severity.

xo 0.56 pulled in eslint 8, including several deprecated transitive deps with security and memory issues.
xo 1.x moved to eslint 9, resolving those issues, but requiring Node 20. (Node 18 went EOL mid last year.)

Bumped CI Node versions matrix to 20, 22, 24.
Includes a few small code changes to satisfy new lint rules in the new xo.

xo 0.56 pulled in eslint 8, including deprecated transitive deps
rimraf 3, glob 7, inflight, @humanwhocodes/*.
xo 1.x moved to eslint 9, resolving those issues, but requiring Node 20.

Includes a few small code changes to satisfy new lint rules.
"time-span": "^5.1.0",
"tsd": "^0.29.0",
"xo": "^0.56.0"
"xo": "^1.2.3"
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The main change.

"sideEffects": false,
"engines": {
"node": ">=18"
"node": ">=20.17"
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency of the new xo version.

Comment on lines +13 to 16
- 24
- 22
- 20
- 18
steps:
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Test across all current LTS versions.

All other changes are just formatting differences required by bumping up xo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant