Skip to content

Conversation

@danyalaytekin
Copy link
Member

@danyalaytekin danyalaytekin commented Nov 6, 2025

Changes

  • require Node 20, 22, 24
  • test against MongoDB 7 again
  • upgrade several dependencies
  • remove implicit dependency on request
  • remove dependency node-fetch
  • reduce vulnerabilities from 29 to 1
  • fix double promisify issue in integration tests

Vulnerability hunt

Before

$npm install
...
29 vulnerabilities (7 low, 6 moderate, 12 high, 4 critical)

After

$ npm install
...
1 low severity vulnerability

@danyalaytekin danyalaytekin marked this pull request as ready for review November 6, 2025 19:53
@danyalaytekin danyalaytekin mentioned this pull request Nov 6, 2025
13 tasks
Copy link
Member

@josebolos josebolos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe for next time we can split fixing the test on a different PR, but looks good! 👍

@danyalaytekin danyalaytekin merged commit e23a1fd into main Nov 8, 2025
12 checks passed
@danyalaytekin danyalaytekin deleted the upgrade branch November 8, 2025 18:47
@danyalaytekin danyalaytekin mentioned this pull request Nov 8, 2025
13 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants