Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: replace mkdirp by make-dir@2 #839

Merged
merged 1 commit into from Mar 23, 2020

Conversation

JLHwung
Copy link
Contributor

@JLHwung JLHwung commented Mar 23, 2020

Please Read the CONTRIBUTING Guidelines
In particular the portion on Commit Message Formatting

What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)

  • Refactoring (no functional changes, no api changes)

What is the current behavior? (You can also link to an open issue here)
Behavior is unchanged.

What is the new behavior?
Replace mkdirp by make-dir@2 so that

  1. we still support node>=6
  2. babel-loader does not depend on minimist anymore. (mkdirp bundled a cli but we are not using it anyway)
  3. installing babel-loader should not print a frustrating deprecated message from mkdirp

Does this PR introduce a breaking change?

  • Yes
  • No

If this PR contains a breaking change, please describe the following...

@JLHwung JLHwung added the dependencies Pull requests that update a dependency file label Mar 23, 2020
@@ -4451,7 +4451,7 @@ mixin-deep@^1.2.0:
for-in "^1.0.2"
is-extendable "^1.0.1"

mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@^0.5.3:
mkdirp@^0.5.0, mkdirp@^0.5.1:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wouldn't this still trigger the deprecation warning anyway?

Copy link
Contributor Author

@JLHwung JLHwung Mar 23, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

mkdirp is now depended only by our devDependencies or peerDependencies.

$ yarn why mkdirp

=> Found "mkdirp@0.5.3"
info Reasons this module exists
   - "@babel#cli" depends on it
   - Hoisted from "@babel#cli#mkdirp"
   - Hoisted from "eslint#mkdirp"
   - Hoisted from "webpack#mkdirp"
   - Hoisted from "nyc#spawn-wrap#mkdirp"
   - Hoisted from "@babel#cli#output-file-sync#mkdirp"
   - Hoisted from "ava#unique-temp-dir#mkdirp"
   - Hoisted from "webpack#terser-webpack-plugin#cacache#mkdirp"
   - Hoisted from "chokidar#fsevents#node-pre-gyp#mkdirp"
   - Hoisted from "chokidar#fsevents#node-pre-gyp#tar#mkdirp"
   - Hoisted from "webpack#terser-webpack-plugin#cacache#move-concurrently#mkdirp"
   - Hoisted from "eslint#file-entry-cache#flat-cache#write#mkdirp"
   - Hoisted from "webpack#terser-webpack-plugin#cacache#move-concurrently#copy-concurrently#mkdirp"

Update: @babel/cli has switched to make-dir in babel/babel#8622 so this PR is also aligning to what we have done on @babel/cli.

@nicolo-ribaudo
Copy link
Member

babel-loader does not depend on minimalist anymore.

Not a blocker for this PR, but this shouldn't be a problem since we resolved the security vulnerability in #834

@nicolo-ribaudo nicolo-ribaudo merged commit adac459 into master Mar 23, 2020
@nicolo-ribaudo nicolo-ribaudo deleted the replace-mkdir-by-make-dir branch March 23, 2020 23:26
@Hypnosphi
Copy link

@nicolo-ribaudo can this please be released?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Mkdirp < 1 deprecated
6 participants