Skip to content

Conversation

@TingluoHuang
Copy link
Member

Update pkg to make npm audit fix clear.

Copilot AI review requested due to automatic review settings November 18, 2025 14:41
@TingluoHuang TingluoHuang requested a review from a team as a code owner November 18, 2025 14:41
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR bumps npm package versions for the hashFiles expression function to address security vulnerabilities identified by npm audit fix. The changes include major version upgrades of TypeScript ESLint tooling and Node.js type definitions, along with corresponding configuration updates and a regenerated webpack bundle.

Key Changes

  • Major version bump of @typescript-eslint packages from v6 to v8
  • Update @types/node from v20 to v22
  • Migration of deprecated ESLint rules to their new equivalents
  • Regenerated webpack bundle (index.js) reflecting the dependency updates

Reviewed Changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 3 comments.

File Description
src/Misc/expressionFunc/hashFiles/package.json Updates devDependencies for @types/node (20.6.2 → 22.0.0), @typescript-eslint/eslint-plugin (6.21.0 → 8.0.0), and @typescript-eslint/parser (6.7.2 → 8.0.0)
src/Misc/expressionFunc/hashFiles/package-lock.json Reflects complete dependency tree updates including transitive dependencies, security patches, and new package additions (undici-types)
src/Misc/expressionFunc/hashFiles/.eslintrc.json Migrates deprecated TypeScript ESLint v6 rules to v8 equivalents (@typescript-eslint/func-call-spacingfunc-call-spacing, @typescript-eslint/semisemi) and removes @typescript-eslint/type-annotation-spacing
src/Misc/layoutbin/hashFiles/index.js Auto-generated webpack/ncc bundle reflecting updated dependencies with new module IDs and updated helper functions
Files not reviewed (1)
  • src/Misc/expressionFunc/hashFiles/package-lock.json: Language not supported

@TingluoHuang TingluoHuang force-pushed the users/tihuang/bumpnpmpkg branch from 01e674f to 024e034 Compare November 18, 2025 14:56
@TingluoHuang TingluoHuang merged commit 7df164d into main Nov 18, 2025
10 checks passed
@TingluoHuang TingluoHuang deleted the users/tihuang/bumpnpmpkg branch November 18, 2025 15:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants