Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[NO-JIRA] Bump typescript and @typescript-eslint #237

Draft
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

token-cjg
Copy link
Contributor

@token-cjg token-cjg commented Jun 26, 2024

Todos

  • Bump @oclif/core to a version that supports Typescript 5.x+ and alter application code to reflect the change in Oclif API
  • Bump @oclif/test to a version that supports the above application code changes

Description

bfc6dc2 Bump typescript and @typescript-eslint

Let's bump our typescript tooling to something a bit more recent, there are
also a few security vulnerabilities associated to earlier @typescript-eslint
which are fixed with this change.

In short,

  • Bump @typescript-eslint from 5.30.0 to 7.14.1
  • Bump typescript from 4.7.4 to 5.4.5. (I opted for the 5.4.x branch since
    5.5.x seems a bit too recent and not mature yet)
  • We also need to bump eslint-config-oclif-typescript from 1.0.2 to 3.1.8, this
    is because it has a transitive dependency on an earlier version of
    @typescript-eslint (^4.31.2) [1] that is incompatible with typescript 5.x+ [2]

[1] https://github.com/oclif/eslint-config-oclif-typescript/blob/v1.0.2/package.json#L8-L9
[2] https://stackoverflow.com/a/77124060

Detail

Bump typescript and @typescript-eslint packages to more recent variants to safeguard against code-rot + address security vulnerabilities

Checklist

  • 💂‍♂️ includes new unit and functional tests

@token-cjg token-cjg force-pushed the cgoddard/no-jira/bump-typescript-eslint branch 3 times, most recently from 96e39df to bfc6dc2 Compare June 26, 2024 01:46
Let's bump our typescript tooling to something a bit more recent, there are
also a few security vulnerabilities associated to earlier `@typescript-eslint`
which are fixed with this change.

Note: I've used a bit of a hammer to silence linting errors from `yarn lint`,
there may be an argument to revisit linting in a future change to finesse
things a tad.

In short,
- Bump `@typescript-eslint` from 5.30.0 to 7.14.1
- Bump typescript from 4.7.4 to 5.4.5. (I opted for the 5.4.x branch since
  5.5.x seems a bit too recent and not mature yet)
- We also need to bump eslint-config-oclif-typescript from 1.0.2 to 3.1.8, this
  is because it has a transitive dependency on an earlier version of
  `@typescript-eslint` (^4.31.2) [1] that is incompatible with typescript 5.x+ [2]
- Squelch linting errors by switching off no-explicit-any in .eslintrc, and
  also silence unused var errors in test and application code.

[1] https://github.com/oclif/eslint-config-oclif-typescript/blob/v1.0.2/package.json#L8-L9
[2] https://stackoverflow.com/a/77124060
@token-cjg token-cjg force-pushed the cgoddard/no-jira/bump-typescript-eslint branch from bfc6dc2 to 5892049 Compare June 26, 2024 01:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant