Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Packages using old versions of glob and inflight #2291

Open
avifenesh opened this issue Sep 13, 2024 · 1 comment
Open

Packages using old versions of glob and inflight #2291

avifenesh opened this issue Sep 13, 2024 · 1 comment
Labels
bug Something isn't working dependency Dependency management Tech debt testing Everything about testing
Milestone

Comments

@avifenesh
Copy link
Collaborator

Glob <V9 is not maintained, and inflight leaks memory.
Both are used for tests usage and not count as security issues.
With that said, jest is well known for memory issues, and using a direct dependency that leaks memory can affect our test's validity or create a flaky test.
Issues are opened in both packages repo's and need to be tracked.

#jest/issues/15236
#protobuf.js/issues/1980

$ npm i
npm WARN deprecated [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm WARN deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm WARN deprecated [email protected]: Glob versions prior to v9 are no longer supported

$ npm ls inflight
@valkey/valkey-glide@ /home/ubuntu/glide-for-redis/node
├─┬ [email protected]
│ └─┬ @jest/[email protected]
│   └─┬ @jest/[email protected]
│     └─┬ [email protected]
│       └── [email protected] deduped
└─┬ [email protected]
  └─┬ [email protected]
    └── [email protected]

$ npm ls glob
@valkey/valkey-glide@ /home/ubuntu/glide-for-redis/node
├─┬ [email protected]
│ └─┬ @jest/[email protected]
│   ├─┬ @jest/[email protected]
│   │ └── [email protected]
│   ├─┬ [email protected]
│   │ └── [email protected] deduped
│   └─┬ [email protected]
│     └── [email protected] deduped
├─┬ [email protected]
│ └── [email protected]
└─┬ [email protected]
  └─┬ @jest/[email protected]
    └─┬ [email protected]
      └─┬ [email protected]
        └── [email protected] deduped
@avifenesh avifenesh added testing Everything about testing tools Dev tools and utils - not CI/CD or OPS dependency Dependency management labels Sep 13, 2024
@xavierraffin
Copy link

Duplicate jestjs/jest#15173

@avifenesh avifenesh added bug Something isn't working and removed tools Dev tools and utils - not CI/CD or OPS labels Nov 8, 2024
@avifenesh avifenesh added this to the Technical debt milestone Nov 14, 2024
@asafpamzn asafpamzn modified the milestones: Technical debt, 1.4 Jan 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working dependency Dependency management Tech debt testing Everything about testing
Projects
Status: No status
Development

No branches or pull requests

4 participants