Skip to content

🆙 📦 Bump ya-disk from 3.0.1 to 5.0.1 - #247

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ya-disk-4.0.1
Closed

🆙 📦 Bump ya-disk from 3.0.1 to 5.0.1#247
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ya-disk-4.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 4, 2023 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps ya-disk from 3.0.1 to 5.0.1.

Release notes

Sourced from ya-disk's releases.

Migrate request transport to fetch

⚡ Migrate request transport from https to fetch (#613)

The internal HTTP transport has been rewritten from Node's https module to the native fetch API. The public API is fully unchanged — this is an internal improvement only.

What changed under the hood:

  • Removed node:https and node:querystring dependencies from lib/request.js
  • Query strings now built via URL.searchParams instead of querystring.stringify
  • request() is a clean async function — no more new Promise() / stream / event boilerplate
  • node:test mock target changed from https.request to globalThis.fetch

Improved error handling:

Previously, a non-JSON response body (e.g. an HTML error page from a proxy or gateway) would throw a raw SyntaxError with no context. It now rejects with a descriptive message:

Error: Unexpected response (status 502): <html>Bad Gateway</html>

Non-2xx responses with an empty or non-JSON body also now produce a meaningful error instead of a TypeError:

Error: Request failed with status 503  [name: ApiError]

🛠️ Internals

  • Test suite for request.js fully rewritten around globalThis.fetch mocking — IncomingMessageStub, ServerResponseStub and all stream scaffolding removed
  • 3 new test cases covering invalid JSON and empty non-2xx response bodies
  • node:https, node:querystring, node:stream imports removed from test file

ESM first

⚠️ Breaking Changes

  • Node.js ≥ 22 is now required. Node 20 and below are no longer supported.
  • Package is now ESM-first. "type": "module" is set in package.json. Direct imports of source files (e.g. require('./lib/download')) no longer work — use the package name instead.
  • Only dist/ is published. Source files (lib/, index.js) are no longer included in the npm tarball.

✨ ESM-first with CommonJS backward compatibility (#611)

ya-disk is now distributed as dual ESM + CJS artifacts, so both import and require consumers work out of the box with no extra configuration:

// ESM
import { info, resources } from 'ya-disk';
// CommonJS
const { info, resources } = require('ya-disk');

The exports field in package.json routes each consumer to the correct artifact automatically. Deep imports into internal paths (e.g. ya-disk/dist/lib/info) are not supported — the dist/ layout is an internal implementation detail and may change between releases.

... (truncated)

Commits
  • acdfb3e feat(#613): migrate request transport from https to fetch (#641)
  • 891e084 feat(#616): add Node 26 to CI matrices; override yargs to fix c8 on Node 26 (...
  • 6a8dbbe chore(#639): remove deprecated Husky v9 shebang lines from git hooks (#642)
  • d649429 feat(#611, #612): ESM-first + CJS compatibility & migrate tests to node:test ...
  • 032f248 🆙 📦 Bump lint-staged from 16.4.0 to 17.0.4 (#635)
  • 3a44f4d 🆙 📦 Bump jest from 30.3.0 to 30.4.2 (#634)
  • 329072e 🆙 📦 Bump eslint from 10.1.0 to 10.3.0 (#626)
  • c3c94e9 🆙 📦 Bump globals from 17.4.0 to 17.6.0 (#624)
  • e887549 🆙 📦 Bump eslint-plugin-jest from 29.15.1 to 29.15.2 (#622)
  • d037a8a 🆙 📦 Bump prettier from 3.8.1 to 3.8.3 (#619)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ya-disk since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dx Changes relative to the Developer eXperience labels Apr 4, 2023
@dependabot
dependabot Bot requested a review from RomiC April 4, 2023 10:57
@RomiC

RomiC commented Aug 5, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot changed the title [🆙 dependencies]: Bump ya-disk from 3.0.1 to 4.0.1 🆙 📦 Bump ya-disk from 3.0.1 to 5.0.1 Aug 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ya-disk-4.0.1 branch from 5d3743a to 9c93e5b Compare August 5, 2026 08:01
@RomiC

RomiC commented Aug 5, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
🆙 📦 Bump ya-disk from 3.0.1 to 5.0.1
d08b36b 
Bumps [ya-disk](https://github.com/RomiC/ya-disk) from 3.0.1 to 5.0.1.
- [Release notes](https://github.com/RomiC/ya-disk/releases)
- [Commits](RomiC/ya-disk@v3.0.1...v5.0.1)

---
updated-dependencies:
- dependency-name: ya-disk
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ya-disk-4.0.1 branch from 9c93e5b to d08b36b Compare August 5, 2026 09:42
@coveralls

coveralls commented Aug 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Coverage Status

coverage: 90.625%. remained the same — dependabot/npm_and_yarn/ya-disk-4.0.1 into master

@dependabot @github

dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #340.

@dependabot dependabot Bot closed this Aug 7, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ya-disk-4.0.1 branch August 7, 2026 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@RomiC RomiC Awaiting requested review from RomiC

Assignees

@RomiC RomiC

Labels

dependencies Pull requests that update a dependency file dx Changes relative to the Developer eXperience

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@RomiC @coveralls