NXT-7082: Updated major dependencies

[daniel-stoian-lgp]

Checklist

• I have read and understand the contribution guide
• A CHANGELOG entry is included
• At least one test case is included for this feature or bug fix
• I have run automated testing and it is passed
• Documentation was added or is not needed
• This is an API breaking change

Issue Resolved / Feature Added

Some dependencies required major version update

Resolution

• globals ^16.x → ^17.x
  • Split audioWorklet environment from browser ==> Not affecting Enact
    (https://github.com/sindresorhus/globals/releases)
• readdirp ^3.x → ^5.x
  • Support hybrid common.js / esm modules
  • Remove glob support and all dependencies ==> Changed used filename filter
  • Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs
  • Make sure you're using let {readdirp} = require('readdirp') in common.js ==> used ReaddirpPromise()
  • This package is now pure ESM
    (https://github.com/paulmillr/readdirp/releases)
• ramda ^0.31..x → ^0.32.x
  • no breaking changes
    (https://github.com/ramda/ramda/releases)

Additional Considerations

Changed node version in travis as node 21 is not supported

Chrome 132 started enforcing Trusted Types, a security feature that prevents XSS (Cross-Site Scripting) attacks by blocking direct assignments to dangerous APIs like innerHTML. ==> replaced setting innerHTMl with textContent. The issue is visible on Windows environment

• query-string ^7.x → ^9.x ==> could not be updated because it surfaces a bug that we have in enact/dev-utils
  • Require Node.js 18
  • This package is now pure ESM
    (https://github.com/sindresorhus/query-string/releases)

Links

NXT-7082

Comments

Enact-DCO-1.0-Signed-off-by: Daniel Stoian (daniel.stoian@lgepartner.com)