Skip to content

Conversation

henrymercer
Copy link
Contributor

Update/remove a bunch of dependencies to bring dependencies more up to date and remove dependencies we no longer need.

Risk assessment

For internal use only. Please select the risk level of this change:

  • Low risk: Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only.

Merge / deployment checklist

  • Confirm this change is backwards compatible with existing workflows.
  • Consider adding a changelog entry for this change.
  • Confirm the readme and docs have been updated if necessary.

@henrymercer henrymercer requested a review from a team as a code owner August 29, 2025 18:54
@Copilot Copilot AI review requested due to automatic review settings August 29, 2025 18:54
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates several dependencies to more current versions, removes unused dependencies, and adapts the codebase to work with the updated APIs. The main focus is on upgrading the del and get-folder-size packages while removing dependencies that are no longer needed.

Key changes:

  • Updated del package from v6 to v8 and migrated from default export to named export API
  • Updated get-folder-size from v2 to v5 and switched to the .loose() method
  • Replaced file-url package with Node.js built-in url.pathToFileURL()

Reviewed Changes

Copilot reviewed 8 out of 20 changed files in this pull request and generated no comments.

Show a summary per file
File Description
src/util.ts Migrated del usage to v8 API and updated get-folder-size to use loose method
src/upload-lib.ts Replaced file-url dependency with Node.js built-in url module
src/debug-artifacts.ts Updated del import and usage to v8 API
src/codeql.test.ts Updated del import and usage to v8 API
src/analyze.ts Updated del import and usage to v8 API
package.json Updated dependency versions and removed unused dependencies
eslint.config.mjs Added new dependencies to import ignore list
.github/dependabot.yml Removed del version constraint since v8 is now supported

Copy link
Contributor

@navntoft navntoft left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@henrymercer henrymercer merged commit 9fde809 into main Sep 1, 2025
279 checks passed
@henrymercer henrymercer deleted the henrymercer/update-dependencies branch September 1, 2025 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants