APIGOV-33776 Security Updates

.github/workflows/build.yml

@@ -12,7 +12,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-node@v4
         with:
-          node-version: "20.x"
+          node-version: "24.x"
       - name: Install dependencies
         run: yarn
       - name: Lint
@@ -25,7 +25,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        nodeVersion: ["20.19.2", "22.16.0"]
+        nodeVersion: ["22.x", "24.x", "26.x"]
         os: [macos-latest]
     steps:
       - uses: actions/checkout@v4
@@ -45,13 +45,13 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        nodeVersion: ["20.19.2", "22.16.0"]
+        nodeVersion: ["22.x", "24.x", "26.x"]
         os: [windows-latest]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v2
+      - uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.nodeVersion }}
       - name: Install dependencies
@@ -65,7 +65,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        nodeVersion: ["20.19.2", "22.16.0"]
+        nodeVersion: ["22.x", "24.x", "26.x"]
         os: [ubuntu-latest]
     steps:
       - uses: actions/checkout@v4

.npmignore

@@ -2,7 +2,7 @@
 .babelrc
 .codeclimate.yml
 .DS_Store
-.eslintrc
+eslint.config.js
 .git*
 .nyc_output
 .travis.yml

CHANGELOG.md

@@ -1,3 +1,10 @@
+# v5.0.0 (Oct 9, 2026)
+
+- BREAKING CHANGE: Require Node.js 22.16.0 LTS or newer.
+- chore: Updated dependencies, including `ci-info` 4, `fs-extra` 11, `chai` 6 and `c8` 12.
+- chore: Upgraded ESLint to v10 and migrated from `.eslintrc` to flat config (`eslint.config.js`).
+- chore: Expanded CI test matrix to Node.js 22.16.0, 24 and 26.
+
 # v4.0.0 (June 18, 2025)
 
 - BREAKING CHANGE: Require Node.js 20.18.2 LTS or newer.

Jenkinsfile

@@ -2,5 +2,5 @@
 library 'pipeline-library'
 
 runNPMPackage {
-  nodeVersions = [ '20.19.2', '22.16.0' ]
+  nodeVersions = [ '22.16.0' ]
 }

eslint.config.js

@@ -0,0 +1,81 @@
+import js from '@eslint/js';
+import chaiExpect from 'eslint-plugin-chai-expect';
+import globals from 'globals';
+import mocha from 'eslint-plugin-mocha';
+import promise from 'eslint-plugin-promise';
+import security from 'eslint-plugin-security';
+
+export default [
+	{
+		ignores: [ 'test/fixtures/**' ]
+	},
+	js.configs.recommended,
+	{
+		files: [ '**/*.js' ],
+		languageOptions: {
+			ecmaVersion: 2022,
+			sourceType: 'module',
+			globals: {
+				...globals.es2021,
+				...globals.node
+			}
+		},
+		plugins: {
+			'chai-expect': chaiExpect,
+			mocha,
+			promise,
+			security
+		},
+		rules: {
+			'array-bracket-spacing': [ 'warn', 'always' ],
+			'brace-style': [ 'error', '1tbs', { allowSingleLine: true } ],
+			camelcase: 'off',
+			'chai-expect/missing-assertion': 'error',
+			'chai-expect/terminating-properties': 'warn',
+			curly: [ 'error', 'all' ],
+			'eol-last': 'error',
+			indent: [ 'error', 'tab', { SwitchCase: 1 } ],
+			'keyword-spacing': [ 'error' ],
+			'linebreak-style': [ 'error', 'unix' ],
+			'max-len': [ 'error', 200 ],
+			'no-case-declarations': 'off',
+			'no-cond-assign': 'off',
+			'no-console': 'off',
+			'no-constant-condition': 'off',
+			'no-control-regex': 'off',
+			'no-empty': 'warn',
+			'no-inner-declarations': 'off',
+			'no-mixed-spaces-and-tabs': 'error',
+			'no-multi-str': 'error',
+			'no-multiple-empty-lines': 'error',
+			'no-trailing-spaces': 'error',
+			'no-unused-vars': 'off',
+			'no-useless-escape': 'warn',
+			'promise/always-return': 'error',
+			'promise/no-return-wrap': 'error',
+			'promise/param-names': 'error',
+			'promise/catch-or-return': 'error',
+			'promise/no-native': 'off',
+			'promise/no-nesting': 'warn',
+			'promise/no-promise-in-callback': 'warn',
+			'promise/no-callback-in-promise': 'warn',
+			'promise/avoid-new': 'off',
+			'promise/no-new-statics': 'error',
+			'promise/no-return-in-finally': 'warn',
+			'promise/valid-params': 'warn',
+			quotes: [ 'error', 'single' ],
+			semi: [ 'error', 'always' ],
+			'space-before-blocks': [ 'error', 'always' ],
+			'space-before-function-paren': [ 'error', { anonymous: 'always', named: 'ignore', asyncArrow: 'always' } ],
+			'space-in-parens': [ 'error', 'never' ],
+			'space-infix-ops': 'error',
+			'space-unary-ops': [ 'error', { nonwords: false, overrides: {} } ]
+		}
+	},
+	{
+		files: [ 'test/**/*.js' ],
+		languageOptions: {
+			globals: globals.mocha
+		}
+	}
+];

package.json

@@ -23,30 +23,32 @@
   ],
   "scripts": {
     "coverage": "c8 npm run test",
-    "lint": "eslint --ignore-pattern test/fixtures src test",
+    "lint": "eslint src test",
     "prepublishOnly": "npm run lint",
     "test": "npm run lint && mocha test/**/test-*.js --reporter spec"
   },
   "dependencies": {
     "@axway/amplify-request": "^4.0.2",
-    "ci-info": "^3.3.2",
-    "fs-extra": "^10.1.0",
-    "registry-auth-token": "5.0.1",
+    "ci-info": "^4.4.0",
+    "fs-extra": "^11.4.1",
+    "registry-auth-token": "5.1.1",
     "semver": "^7.3.7",
     "snooplogg": "^5.0.0",
     "source-map-support": "^0.5.21",
     "tmp": "^0.2.1"
   },
   "devDependencies": {
-    "c8": "^7.11.3",
-    "chai": "^4.3.6",
-    "chai-as-promised": "^7.1.1",
-    "eslint": "^8.19.0",
-    "eslint-plugin-chai-expect": "^3.0.0",
-    "eslint-plugin-mocha": "^10.0.5",
-    "eslint-plugin-promise": "^6.0.0",
-    "eslint-plugin-security": "^1.5.0",
-    "mocha": "^10.0.0"
+    "@eslint/js": "^10.0.1",
+    "c8": "^12.0.0",
+    "chai": "^6.3.0",
+    "chai-as-promised": "^8.0.2",
+    "eslint": "^10.12.0",
+    "eslint-plugin-chai-expect": "^4.1.1",
+    "eslint-plugin-mocha": "^12.0.2",
+    "eslint-plugin-promise": "^7.3.0",
+    "eslint-plugin-security": "^4.2.0",
+    "globals": "^17.13.0",
+    "mocha": "^12.0.0"
   },
   "homepage": "https://github.com/appcelerator/check-kit",
   "bugs": "https://github.com/appcelerator/check-kit/issues",
@@ -55,6 +57,6 @@
     "url": "git://github.com/appcelerator/check-kit.git"
   },
   "engines": {
-    "node": ">=20.18.2"
+    "node": ">=22.16.0"
   }
 }

test/test-check-kit.js

@@ -1,4 +1,5 @@
-import chai, { expect } from 'chai';
+import * as chai from 'chai';
+import { expect } from 'chai';
 import chaiAsPromised from 'chai-as-promised';
 import check, { loadPackageJson } from '../src/index.js';
 import fs from 'fs-extra';