Skip to content

Commit a723e53

Browse files
fix(deps): downgrade write-file-atomic 8.0.0→7.0.1 to match supported node range (#155)
## Summary `write-file-atomic@8.0.0` declares `engines: { node: "^22.22.2 || ^24.15.0 || >=26.0.0" }` — which **excludes node 20 entirely, and node 22.0–22.22.1**. That contradicts this repo's own supported-node matrix and produces `EBADENGINE` on `npm install -g @opencodehub/cli@latest` (reported on node 22.22.0), plus a hard failure on the node-20 leg of Verify Global Install (we set `engineStrict: true`). | | node range | |---|---| | Repo `engines` (root) | `>=22.0.0` | | `cli` `engines` | `>=20.0.0` | | Verify Global Install matrix | node **20** / 22 / 24 | | `write-file-atomic@8.0.0` requires | `^22.22.2 \|\| ^24.15.0 \|\| >=26.0.0` ❌ | | `write-file-atomic@7.0.1` requires | `^20.17.0 \|\| >=22.9.0` ✅ covers the whole matrix | ## Changes Pin `write-file-atomic` `8.0.0 → 7.0.1` in the 4 packages that depend on it: **`cli`, `analysis`, `ingestion`, `wiki`**. Lockfile regenerated — 26 lines, only write-file-atomic (4 importer specifiers + package def + snapshot + time entry), same single transitive (`signal-exit@4.1.0`), no unrelated churn. ## Why this is safe - `write-file-atomic@8.0.0` arrived via a **Dependabot consolidation** (#91), not a deliberate security bump. The package has **no advisories** (clean on osv). - Our API usage — `wfa(path, content)` and `wfa(path, content, { raw: true })` — is unchanged since v4. `@types/write-file-atomic@4.0.3` (already a devDep) still applies; left untouched. ## Verification - `pnpm --filter @opencodehub/analysis --filter @opencodehub/cli build` (tsc -b) — clean - `pnpm --filter @opencodehub/analysis test` — 143/143 - Full recursive pre-push gate (`pnpm -r test` + typecheck + verdict) — green ## Test plan - [x] Lockfile resolves write-file-atomic@7.0.1 with engines covering node 20/22/24 - [x] Direct consumers (cli, analysis) typecheck + build - [x] Recursive test suite green
1 parent 64968e5 commit a723e53

5 files changed

Lines changed: 17 additions & 17 deletions

File tree

packages/analysis/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
"@opencodehub/sarif": "workspace:*",
4343
"@opencodehub/storage": "workspace:*",
4444
"@opencodehub/wiki": "workspace:*",
45-
"write-file-atomic": "8.0.0"
45+
"write-file-atomic": "7.0.1"
4646
},
4747
"devDependencies": {
4848
"@types/node": "25.9.1",

packages/cli/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@
5353
"commander": "14.0.3",
5454
"envinfo": "7.21.0",
5555
"listr2": "10.2.1",
56-
"write-file-atomic": "8.0.0",
56+
"write-file-atomic": "7.0.1",
5757
"yaml": "2.9.0"
5858
},
5959
"devDependencies": {

packages/ingestion/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@
5858
"snyk-nodejs-lockfile-parser": "2.7.1",
5959
"spdx-correct": "^3.2.0",
6060
"web-tree-sitter": "0.26.9",
61-
"write-file-atomic": "8.0.0"
61+
"write-file-atomic": "7.0.1"
6262
},
6363
"devDependencies": {
6464
"@types/node": "25.9.1",

packages/wiki/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@
4141
"@opencodehub/core-types": "workspace:*",
4242
"@opencodehub/storage": "workspace:*",
4343
"@opencodehub/summarizer": "workspace:*",
44-
"write-file-atomic": "8.0.0"
44+
"write-file-atomic": "7.0.1"
4545
},
4646
"devDependencies": {
4747
"@types/node": "25.9.1",

pnpm-lock.yaml

Lines changed: 13 additions & 13 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)