Skip to content

fix: bump archiver ^6 -> ^7 to drop deprecated inflight (APPBLD-4614) - #234

Open
AnujVishwakarma-src wants to merge 1 commit into
adobe:masterfrom
AnujVishwakarma-src:APPBLD-4503-archiver-7
Open

fix: bump archiver ^6 -> ^7 to drop deprecated inflight (APPBLD-4614)#234
AnujVishwakarma-src wants to merge 1 commit into
adobe:masterfrom
AnujVishwakarma-src:APPBLD-4503-archiver-7

Conversation

@AnujVishwakarma-src

Copy link
Copy Markdown

What & why

Fixes APPBLD-4614 — clean up npm warn deprecated from @adobe/aio-lib-runtime.

Bumps archiver ^6.0.1 → ^7.0.1. archiver@6 pulls archiver-utils@4 → glob@8 → inflight@1.0.6 (deprecated). archiver@7 (via archiver-utils@5) drops the inflight dependency entirely.

archiver's public API used by src/utils.js (archiver('zip', { zlib }), .directory, .file, .finalize) is unchanged between v6 and v7; v7's only breaking change is dropping Node < 18 (this package requires >=20).

Why not archiver@8?

archiver@8 is ESM-only ("type": "module", import { ZipArchive } from "archiver"). Adopting it in this CommonJS package would force a full ESM migration (out of scope here). archiver@7 is the CJS-safe ceiling.

Note on the remaining glob

archiver@7 still resolves a deprecated glob@10 transitively (archiver-utils@5 pins glob@^10; only glob 12/13 are non-deprecated). That is closed separately by a scoped overrides: { "archiver-utils": { "glob": "^13" } } at the aio-cli install root — npm overrides are only honored from the root project, so it cannot live in this library. Tracked as a follow-up.

Before / after (real npm install warnings, this package as a dependency)

Before (@adobe/aio-lib-runtime@7.4.0):

npm warn deprecated glob@8.1.0: Old versions of glob are not supported ...
npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory ...

After (this branch):

(no inflight warning)
npm warn deprecated glob@10.5.0: ...   # closed at aio-cli root via scoped override

inflight eliminated from the archiver path.

Validation

  • npm test462 unit tests pass, lint clean
  • ✅ Real-archiver@7 zip smoke test (directory + file entries) produces a valid archive
  • ✅ Downstream consumer @adobe/aio-cli-plugin-runtime1002 tests pass with this build linked in (no regressions)
  • ⚠️ e2e requires live OpenWhisk credentials (RuntimeAPI_API_KEY, RuntimeAPI_NAMESPACE) and was not run locally

archiver@6 pulls archiver-utils@4 -> glob@8 -> inflight@1.0.6 (deprecated).
archiver@7 (archiver-utils@5) drops the inflight dependency entirely.

Verified: 462 unit tests + lint pass; real-archiver zip smoke test passes;
downstream aio-cli-plugin-runtime (1002 tests) passes with this build linked.
archiver@7 keeps CommonJS support (archiver@8 is ESM-only). The remaining
deprecated glob is closed separately via a scoped archiver-utils.glob override
at the aio-cli install root (npm overrides are root-only). e2e requires
OpenWhisk credentials and was not run locally.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@codecov

codecov Bot commented Sep 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant