eggjs / egg

🥚 Born to build better enterprise frameworks and apps with Node.js & Koa
https://eggjs.org
MIT License
18.84k stars 1.81k forks source link

Upgrade dependencies #4695

Open sm2017 opened 3 years ago

sm2017 commented 3 years ago

There are many old version dependencies in egg ecosystem, Please update all dependencies

In a fresh egg

yarn install v1.22.10
info No lockfile found.
[1/5] Validating package.json...
[2/5] Resolving packages...
warning egg > egg-multipart > uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
warning egg > egg-core > ready-callback > uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
warning egg > egg-session > koa-session > uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
warning egg > egg-core > globby > fast-glob > micromatch > snapdragon > source-map-resolve > urix@0.1.0: Please see https://github.com/lydell/urix#deprecated
warning egg > egg-core > globby > fast-glob > micromatch > snapdragon > source-map-resolve > resolve-url@0.2.1: https://github.com/lydell/resolve-url#deprecated
warning autod > babel-preset-react > babel-plugin-transform-react-jsx-self > babel-runtime > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning autod > babel-core > babel-register > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > nyc > uuid@3.4.0: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
warning egg-bin > mocha > debug@3.2.6: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1. (https://github.com/visionmedia/debug/issues/797)
warning egg-bin > mocha > mkdirp@0.5.4: Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)
warning egg-bin > power-assert > empower > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > power-assert > power-assert-formatter > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > egg-ts-helper > chokidar@2.1.8: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies.
warning egg-bin > espower-source > espower > espurify > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > power-assert > empower > empower-core > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > power-assert > power-assert-formatter > power-assert-context-reducer-ast > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > power-assert > power-assert-formatter > power-assert-renderer-diagram > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > power-assert > power-assert-formatter > power-assert-context-formatter > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > power-assert > power-assert-formatter > power-assert-renderer-comparison > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > egg-ts-helper > chokidar > fsevents@1.2.13: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.
warning egg-bin > espower-source > espower > escallmatch > call-matcher > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > power-assert > power-assert-formatter > power-assert-context-formatter > power-assert-context-traversal > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning egg-bin > power-assert > power-assert-formatter > power-assert-renderer-diagram > stringifier > core-js@2.6.12: core-js@<3.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Please, upgrade your dependencies to the actual version of core-js.
warning eslint-config-egg > babel-eslint@8.2.6: babel-eslint is now @babel/eslint-parser. This package will no longer receive updates.
[3/5] Fetching packages...
info fsevents@1.2.13: The platform "win32" is incompatible with this module.
info "fsevents@1.2.13" is an optional dependency and failed compatibility check. Excluding it from installation.
[4/5] Linking dependencies...
warning "egg-bin > co-mocha@1.2.2" has incorrect peer dependency "mocha@>=1.18 <6".
warning "eslint-config-egg > @typescript-eslint/eslint-plugin > tsutils@3.21.0" has unmet peer dependency "typescript@>=2.8.0 || >= 3.2.0-dev || >= 3.3.0-dev || >= 3.4.0-dev || >= 3.5.0-dev || >= 3.6.0-dev || >= 3.6.0-beta || >= 3.7.0-dev || >= 3.7.0-beta".
[5/5] Building fresh packages...
success Saved lockfile.
Done in 246.50s.
sm2017 commented 3 years ago

@atian25 can you please reply

atian25 commented 3 years ago

yes,sorry for delay, I will look to it this week.

sm2017 commented 3 years ago

@atian25 please update ecosystems too (egg-*) such as egg-s3 egg-sequelize , ...

hubcarl commented 3 years ago

upgrade dependencies for Node 8:

can`t fix

...

brookqin commented 3 years ago

node -v
v14.16.0

npm -v
7.17.0

"dependencies": {
  "egg": "^2.29.4",
  "egg-scripts": "^2.14.0"
},
"devDependencies": {
  "autod": "^3.1.1",
  "autod-egg": "^1.1.0",
  "egg-bin": "^4.16.2",
  "egg-ci": "^1.18.0",
  "egg-mock": "^4.1.0"
}
npm WARN ERESOLVE overriding peer dependency
npm WARN Found: mocha@6.2.3
npm WARN node_modules/mocha
npm WARN   mocha@"^6.0.2" from egg-bin@4.16.2
npm WARN   node_modules/egg-bin
npm WARN     dev egg-bin@"^4.16.2" from the root project
npm WARN 
npm WARN Could not resolve dependency:
npm WARN peer mocha@">=1.18 <6" from co-mocha@1.2.2
npm WARN node_modules/co-mocha
npm WARN   co-mocha@"^1.2.2" from egg-bin@4.16.2
npm WARN   node_modules/egg-bin
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! Found: chokidar@2.1.8
npm ERR! node_modules/chokidar
npm ERR!   chokidar@"^2.0.1" from egg-ts-helper@1.25.9
npm ERR!   node_modules/egg-ts-helper
npm ERR!     egg-ts-helper@"^1.25.2" from egg-bin@4.16.2
npm ERR!     node_modules/egg-bin
npm ERR!       dev egg-bin@"^4.16.2" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peerOptional chokidar@"^3.3.0" from nunjucks@3.2.3
npm ERR! node_modules/nunjucks
npm ERR!   nunjucks@"^3.1.3" from egg-ci@1.18.0
npm ERR!   node_modules/egg-ci
npm ERR!     dev egg-ci@"^1.18.0" from the root project
npm ERR! 
hubcarl commented 3 years ago

@brookqin 可以看一下这个 https://github.com/eggjs/egg/issues/4690