v2.2.3 - dependency updates

mapsam commented 4 years ago

What changed?

Making some retroactive dependency updates to the v2.x branch for any 2.x users out there. Biggest changes are:

test on node 10/12 in travis
update lodash dependency to 4.x to resolve security audit
update lodash byIndex to byKey method
update test/cli.test.js to use dynalite and mock s3 instead of remote services
update documentationjs and api.md format
update nyc dependency
remove coveralls, add codecov for coverage dependencies
published under the @mapbox npm namespace now (same as 3.x)

I didn't get a chance to update dynalite since tests fail with the latest major version, but since this is part of the devDeps I'm not concerned about it. I am not updating protobufjs (via geobuf) since this is a moderate security issue and only arises when the .proto file is invalid. Cardboard relies on a static .proto file (via geobuf.proto in the geobuf module) so the vulnerability does not impact this repo.

I'll plan on releasing as v2.2.3 but will not release on the latest NPM tag, but a v2.x-latest tag.

cc @flippmoke @mcwhittemore @ericcarlschwartz @ajashton

mapsam commented 4 years ago

Thanks @flippmoke!

mapsam commented 4 years ago

This has been published under the v2x-latest tag on NPM (to avoid the default latest tag).

$ npm info @mapbox/cardboard

@mapbox/cardboard@3.0.4 | ISC | deps: 14 | versions: 10
A library for storing and searching geographic features
https://github.com/mapbox/cardboard

...

dist-tags:
dev: 2.2.3-dev4    latest: 3.0.4      v2x-latest: 2.2.3

mapbox / cardboard

v2.2.3 - dependency updates #200

What changed?