node version mismatch: engine version of module does not match dependency

[shazron]

Description

minimatch@>=10 requires node 20 or greater:
https://github.com/isaacs/minimatch/blob/0569cd3373408f9d701d3aab187b3f43a24a0db7/package.json#L53

This module only requires node 10 or greater:

node-folder-hash/package.json

Line 53 in d8912e3

"node": ">=10.10.0"

Users using this module version using (caret) node-folder-hash@^4 will pick up this change but it will potentially break their code if they are using a node less than 20.

node-folder-hash@4.0.4 requires minmatch@~5.1.2 which only required "node": ">=10": https://github.com/isaacs/minimatch/blob/3e216b9cf09528b8cbb90c5ecc01d054326d8f85/package.json#L22C5-L22C19

Fix

This latest update should be a major version update (according to semver) since it is a breaking change (node version engine update), and it should update the engines node version in package.json

Workaround

Users should pin to v4.0.4

[marc136]

Thank you for raising this issue @shazron, I'll release a 4.1.1 version that works again on node 10.

[marc136]

I picked the latest v7 of minimatch, which still has node >= 10 as supported engine.

Not sure if I will upgrade to v8 or v10 for my next major version. For now minimatch@v7 is not reported with npm audit.

[shazron]

thank you for the fast response, much appreciated! 🙏