Node.js version
v25.8.1
NPM version
11.11.0
@checkly/cli version
checkly@7.15.0
Steps to reproduce
Install checkly@7.15.0 in an npm project:
npm install --save-dev checkly@7.15.0
npm explain glob
What is expected?
The install should not pull in deprecated glob@10.5.0 copies when the current glob release is available.
What is actually happening?
checkly@7.15.0 still declares glob: ^10.5.0, and npm explain glob shows:
glob@10.5.0 dev
node_modules/checkly/node_modules/glob
glob@"^10.5.0" from checkly@7.15.0
glob@10.5.0 dev
node_modules/archiver-utils/node_modules/glob
glob@"^10.0.0" from archiver-utils@5.0.2
archiver-utils@5.0.2 from archiver@7.0.1
archiver@7.0.1 from checkly@7.15.0
During install, npm emits:
npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version.
Any additional comments?
This looks like two dependency edges:
- direct:
checkly -> glob@^10.5.0
- transitive:
checkly -> archiver@7.0.1 -> archiver-utils@5.0.2 -> glob@^10.0.0
glob@13.0.6 is currently available and supports Node 18 || 20 || >=22, so it appears compatible with Checkly's current supported Node range. If the CLI can move to glob@^13, it would remove one deprecated install warning. The archiver-utils edge may require an upstream archiver/archiver-utils update or override.
Node.js version
v25.8.1
NPM version
11.11.0
@checkly/cli version
checkly@7.15.0
Steps to reproduce
Install
checkly@7.15.0in an npm project:What is expected?
The install should not pull in deprecated
glob@10.5.0copies when the currentglobrelease is available.What is actually happening?
checkly@7.15.0still declaresglob: ^10.5.0, andnpm explain globshows:During install, npm emits:
Any additional comments?
This looks like two dependency edges:
checkly -> glob@^10.5.0checkly -> archiver@7.0.1 -> archiver-utils@5.0.2 -> glob@^10.0.0glob@13.0.6is currently available and supports Node18 || 20 || >=22, so it appears compatible with Checkly's current supported Node range. If the CLI can move toglob@^13, it would remove one deprecated install warning. Thearchiver-utilsedge may require an upstreamarchiver/archiver-utilsupdate or override.