Skip to content

chore(deps): refresh SDK and example dependencies - #768

Merged
AaronDDM merged 2 commits into
mainfrom
chore/nodejs-dependency-refresh
Oct 13, 2026
Merged

AaronDDM merged 2 commits into
mainfrom
chore/nodejs-dependency-refresh

Conversation

@AaronDDM

@AaronDDM AaronDDM commented Oct 13, 2026 •

Copy link
Copy Markdown
Collaborator

The SDK and examples have 187 open Dependabot alerts, mostly from stale example lockfiles. Refresh all seven dependency trees to compatible current versions; every project now reports zero npm audit vulnerabilities, and no lockfile still matches an original alert's vulnerable range.

  • Upgrade Jest 30, the fetch mock, ESLint 9 with flat configuration, TypeScript lint tooling, TypeDoc, and the supporting packages. Update the removed Jest matcher aliases and assert request text through the native Request API.
  • Align the Lambda example's lockfile and configuration with its existing Serverless 4 requirement. Use built-in esbuild and dotenv support, remove the obsolete plugins, and declare esbuild for the manual bundler.
  • Update the Cloudflare examples to Vite 8 and current compatible Wrangler/Workers types. Document their Node 22.12 tooling requirement; the published SDK still supports Node 18.
  • Override js-yaml only under the coverage configuration loader to remove its vulnerable sprintf-js dependency, with a YAML configuration regression test. Add omitted-option and attachment-free payload cases exposed by the newer coverage instrumentation.
  • Add CommonJS/ESM package import and UUID smoke checks to the existing Node CI matrix, and use npm ci to verify the lockfile. Fix the existing calendar sample type errors and compile independently managed examples with their own configurations.

Compatibility limits: keep change-case 4 and uuid 11 for CommonJS, Babel 7 and ESLint 9 for the Node 18 CI jobs, TypeScript 5.9 for the current compiler configuration and supported test/docs tooling, and CommonJS-compatible CLI/archive dependencies. Respect the local three-day minimum package release age. Formatting changes come from the Prettier update.

Validation:

  • Clean npm ci, SDK ESM/CJS builds, lint, and formatting checks pass.
  • GitHub CI passes all 502 tests, SDK builds, lint, formatting, and CommonJS/ESM smoke checks on Node 18, 20, 24, and 25. Local line coverage remains 99.17%, and branch coverage increases from 95.17% to 96.30%.
  • A freshly packed SDK installs and passes CommonJS/ESM smoke checks on Node 18.
  • General examples, Lambda, and both Cloudflare examples type-check; Lambda bundles and exports its handler, Vite builds, and Wrangler deploy --dry-run succeeds. The Lambda setup CLI help works.
  • npm audit reports zero vulnerabilities in the SDK and all six example projects.
  • GitHub documentation and CodeQL checks pass. TypeDoc builds successfully with its existing documentation warnings. Live example deployments to AWS/Cloudflare were not exercised.

Supersedes the dependency updates in #756, #761, #762, #764, and #765 once merged.

@codecov

codecov Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.75%. Comparing base (0898fb0) to head (0e2b865).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #768   +/-   ##
=======================================
  Coverage   98.75%   98.75%           
=======================================
  Files          43       43           
  Lines        1041     1041           
  Branches       90       90           
=======================================
  Hits         1028     1028           
  Misses         12       12           
  Partials        1        1           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@qasim-nylas qasim-nylas left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@qasim-nylas qasim-nylas left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@AaronDDM
AaronDDM merged commit 027fc49 into main Oct 13, 2026
10 checks passed

This branch was successfully deployed

1 active deployment
sdk-reference — 0e2b865a Deployed Oct 13, 2026 by AaronDDM via docs #756
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants