Skip to content

Upgrade ldapts 8.1.8 → 9.0.0  #7980

Description

@n-lark

Upgrade ldapts 8.1.8 → 9.0.0 (major)

Dependabot PR #7815. Runtime dependency: LDAP client for SSO/LDAP auth, used in forge/ee/lib/sso/index.js and forge/ee/routes/sso/index.js. Pulled out of the weekly Dependabot slot per the major-version process — needs an owner and verification, not a batch merge.

Compatibility pre-check

  • ⚠️ Node engines: v9 requires >=22, but ldapts is a runtime dep and our package.json declares engines: >=20.10.0 — shipping it drops Node 20 for self-hosted installs. Raising the engines floor (dropping Node 20 support) is a policy decision, not just a dev/CI Node bump.
  • ✅ peerDependencies: none.
  • ✅ Removed Filter#escape instance method: no usage in our SSO code (only Client, InvalidCredentialsError imported).
  • Current: package.json range ^8.1.8; lockfile resolves 8.1.8.

Breaking changes to review

  • Node.js >= 22 now required.
  • Deprecated Filter#escape instance method removed — use static Filter.escape() instead.

To do before merge

  • Decide whether to raise the repo engines floor to >=22 (drops Node 20 support) — required before shipping.
  • Verify LDAP login end-to-end (this is an auth path).
  • Exercise SSO provider config + bind/search in forge/ee/lib/sso/index.js against the new client version.
  • Read the 9.x changelog and reconcile with our usage.

Refs

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Status
    No status

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions