Commit a723e53
authored
fix(deps): downgrade write-file-atomic 8.0.0→7.0.1 to match supported node range (#155)
## Summary
`write-file-atomic@8.0.0` declares `engines: { node: "^22.22.2 ||
^24.15.0 || >=26.0.0" }` — which **excludes node 20 entirely, and node
22.0–22.22.1**. That contradicts this repo's own supported-node matrix
and produces `EBADENGINE` on `npm install -g @opencodehub/cli@latest`
(reported on node 22.22.0), plus a hard failure on the node-20 leg of
Verify Global Install (we set `engineStrict: true`).
| | node range |
|---|---|
| Repo `engines` (root) | `>=22.0.0` |
| `cli` `engines` | `>=20.0.0` |
| Verify Global Install matrix | node **20** / 22 / 24 |
| `write-file-atomic@8.0.0` requires | `^22.22.2 \|\| ^24.15.0 \|\|
>=26.0.0` ❌ |
| `write-file-atomic@7.0.1` requires | `^20.17.0 \|\| >=22.9.0` ✅ covers
the whole matrix |
## Changes
Pin `write-file-atomic` `8.0.0 → 7.0.1` in the 4 packages that depend on
it: **`cli`, `analysis`, `ingestion`, `wiki`**. Lockfile regenerated —
26 lines, only write-file-atomic (4 importer specifiers + package def +
snapshot + time entry), same single transitive (`signal-exit@4.1.0`), no
unrelated churn.
## Why this is safe
- `write-file-atomic@8.0.0` arrived via a **Dependabot consolidation**
(#91), not a deliberate security bump. The package has **no advisories**
(clean on osv).
- Our API usage — `wfa(path, content)` and `wfa(path, content, { raw:
true })` — is unchanged since v4. `@types/write-file-atomic@4.0.3`
(already a devDep) still applies; left untouched.
## Verification
- `pnpm --filter @opencodehub/analysis --filter @opencodehub/cli build`
(tsc -b) — clean
- `pnpm --filter @opencodehub/analysis test` — 143/143
- Full recursive pre-push gate (`pnpm -r test` + typecheck + verdict) —
green
## Test plan
- [x] Lockfile resolves write-file-atomic@7.0.1 with engines covering
node 20/22/24
- [x] Direct consumers (cli, analysis) typecheck + build
- [x] Recursive test suite green1 parent 64968e5 commit a723e53
5 files changed
Lines changed: 17 additions & 17 deletions
File tree
- packages
- analysis
- cli
- ingestion
- wiki
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
42 | 42 | | |
43 | 43 | | |
44 | 44 | | |
45 | | - | |
| 45 | + | |
46 | 46 | | |
47 | 47 | | |
48 | 48 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
53 | 53 | | |
54 | 54 | | |
55 | 55 | | |
56 | | - | |
| 56 | + | |
57 | 57 | | |
58 | 58 | | |
59 | 59 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
58 | 58 | | |
59 | 59 | | |
60 | 60 | | |
61 | | - | |
| 61 | + | |
62 | 62 | | |
63 | 63 | | |
64 | 64 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
44 | | - | |
| 44 | + | |
45 | 45 | | |
46 | 46 | | |
47 | 47 | | |
| |||
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments