Upgrade ldapts 8.1.8 → 9.0.0 (major)
Dependabot PR #7815. Runtime dependency: LDAP client for SSO/LDAP auth, used in forge/ee/lib/sso/index.js and forge/ee/routes/sso/index.js. Pulled out of the weekly Dependabot slot per the major-version process — needs an owner and verification, not a batch merge.
Compatibility pre-check
- ⚠️ Node engines: v9 requires
>=22, but ldapts is a runtime dep and our package.json declares engines: >=20.10.0 — shipping it drops Node 20 for self-hosted installs. Raising the engines floor (dropping Node 20 support) is a policy decision, not just a dev/CI Node bump.
- ✅ peerDependencies: none.
- ✅ Removed
Filter#escape instance method: no usage in our SSO code (only Client, InvalidCredentialsError imported).
- Current:
package.json range ^8.1.8; lockfile resolves 8.1.8.
Breaking changes to review
- Node.js >= 22 now required.
- Deprecated
Filter#escape instance method removed — use static Filter.escape() instead.
To do before merge
Refs
Upgrade ldapts 8.1.8 → 9.0.0 (major)
Dependabot PR #7815. Runtime dependency: LDAP client for SSO/LDAP auth, used in
forge/ee/lib/sso/index.jsandforge/ee/routes/sso/index.js. Pulled out of the weekly Dependabot slot per the major-version process — needs an owner and verification, not a batch merge.Compatibility pre-check
>=22, but ldapts is a runtime dep and ourpackage.jsondeclaresengines: >=20.10.0— shipping it drops Node 20 for self-hosted installs. Raising the engines floor (dropping Node 20 support) is a policy decision, not just a dev/CI Node bump.Filter#escapeinstance method: no usage in our SSO code (onlyClient,InvalidCredentialsErrorimported).package.jsonrange^8.1.8; lockfile resolves8.1.8.Breaking changes to review
Filter#escapeinstance method removed — use staticFilter.escape()instead.To do before merge
enginesfloor to>=22(drops Node 20 support) — required before shipping.forge/ee/lib/sso/index.jsagainst the new client version.Refs
dependabot/npm_and_yarn/ldapts-9.0.0