Skip to content

feat: update nodejs #644

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 13 commits into
base: master
Choose a base branch
from

Conversation

elaine-mattos
Copy link

@elaine-mattos elaine-mattos commented Jul 17, 2025

Overview

This PR introduces several significant updates and improvements to the project, including:

Node.js version upgrades (Dockerfiles, CI, engines)
Dependency updates (major and minor, including security and compatibility)

Changes

Node.js Version Upgrades

  • DevDockerfile and Dockerfile: Upgraded from node:18-bullseye to node:24-bullseye
  • test.yml: Node.js version set to 24

Dependency Updates

  • Major dependency upgrades in Azure SDKs, Babel, ESLint, Express, Chai, Winston, and more;
  • Security and compatibility improvements;
  • Removal of deprecated/unsupported versions.
  • ScanCode: updated from 32.1.0 to 32.3.3
  • Reuse: updated from 3.0.1 to 5.0.2
  • cdConfig.js: Introduced baseFileLocation for consistent file path handling; cd_file now has separate location and attachmentLocation properties
  • file.js: Attachments are now stored in a dedicated attachment directory if attachmentLocation is set; File naming for attachments improved (attachment:KEY → attachmentLocation/KEY.json)
  • Removed deprecated winston-azure-application-insights integration.
  • Upgraded winston and refined local logging.

Miscellaneous

  • Added env.json to .gitignore to prevent local config leakage.

Signed-off-by: ElaineDeMattosSilvaB <[email protected]>
Signed-off-by: ElaineDeMattosSilvaB <[email protected]>
- Refactor _detectVersion to robustly parse version using regex and handle missing versions
- Catch and log version detection errors
- Log detected SCANCODE and aggregated handler versions on initialization

Signed-off-by: ElaineDeMattosSilvaB <[email protected]>
Signed-off-by: ElaineDeMattosSilvaB <[email protected]>
- Enhance error and version logging in fsfeReuse and licensee processors
- Improve error reporting for LICENSES directory access and REUSE execution
- Add attachment path support in file store for  keys
- Minor formatting cleanup

Signed-off-by: ElaineDeMattosSilvaB <[email protected]>
Signed-off-by: ElaineDeMattosSilvaB <[email protected]>
Signed-off-by: ElaineDeMattosSilvaB <[email protected]>
@elaine-mattos elaine-mattos marked this pull request as ready for review July 23, 2025 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant