Skip to content

🆙 📦 Bump ya-disk from 3.0.1 to 5.0.1 - #340

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ya-disk-5.0.1
Closed

🆙 📦 Bump ya-disk from 3.0.1 to 5.0.1#340
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ya-disk-5.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps ya-disk from 3.0.1 to 5.0.1.

Release notes

Sourced from ya-disk's releases.

Migrate request transport to fetch

⚡ Migrate request transport from https to fetch (#613)

The internal HTTP transport has been rewritten from Node's https module to the native fetch API. The public API is fully unchanged — this is an internal improvement only.

What changed under the hood:

  • Removed node:https and node:querystring dependencies from lib/request.js
  • Query strings now built via URL.searchParams instead of querystring.stringify
  • request() is a clean async function — no more new Promise() / stream / event boilerplate
  • node:test mock target changed from https.request to globalThis.fetch

Improved error handling:

Previously, a non-JSON response body (e.g. an HTML error page from a proxy or gateway) would throw a raw SyntaxError with no context. It now rejects with a descriptive message:

Error: Unexpected response (status 502): <html>Bad Gateway</html>

Non-2xx responses with an empty or non-JSON body also now produce a meaningful error instead of a TypeError:

Error: Request failed with status 503  [name: ApiError]

🛠️ Internals

  • Test suite for request.js fully rewritten around globalThis.fetch mocking — IncomingMessageStub, ServerResponseStub and all stream scaffolding removed
  • 3 new test cases covering invalid JSON and empty non-2xx response bodies
  • node:https, node:querystring, node:stream imports removed from test file

ESM first

⚠️ Breaking Changes

  • Node.js ≥ 22 is now required. Node 20 and below are no longer supported.
  • Package is now ESM-first. "type": "module" is set in package.json. Direct imports of source files (e.g. require('./lib/download')) no longer work — use the package name instead.
  • Only dist/ is published. Source files (lib/, index.js) are no longer included in the npm tarball.

✨ ESM-first with CommonJS backward compatibility (#611)

ya-disk is now distributed as dual ESM + CJS artifacts, so both import and require consumers work out of the box with no extra configuration:

// ESM
import { info, resources } from 'ya-disk';
// CommonJS
const { info, resources } = require('ya-disk');

The exports field in package.json routes each consumer to the correct artifact automatically. Deep imports into internal paths (e.g. ya-disk/dist/lib/info) are not supported — the dist/ layout is an internal implementation detail and may change between releases.

... (truncated)

Commits
  • acdfb3e feat(#613): migrate request transport from https to fetch (#641)
  • 891e084 feat(#616): add Node 26 to CI matrices; override yargs to fix c8 on Node 26 (...
  • 6a8dbbe chore(#639): remove deprecated Husky v9 shebang lines from git hooks (#642)
  • d649429 feat(#611, #612): ESM-first + CJS compatibility & migrate tests to node:test ...
  • 032f248 🆙 📦 Bump lint-staged from 16.4.0 to 17.0.4 (#635)
  • 3a44f4d 🆙 📦 Bump jest from 30.3.0 to 30.4.2 (#634)
  • 329072e 🆙 📦 Bump eslint from 10.1.0 to 10.3.0 (#626)
  • c3c94e9 🆙 📦 Bump globals from 17.4.0 to 17.6.0 (#624)
  • e887549 🆙 📦 Bump eslint-plugin-jest from 29.15.1 to 29.15.2 (#622)
  • d037a8a 🆙 📦 Bump prettier from 3.8.1 to 3.8.3 (#619)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ya-disk since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
🆙 📦 Bump ya-disk from 3.0.1 to 5.0.1
d7676c1 
Bumps [ya-disk](https://github.com/RomiC/ya-disk) from 3.0.1 to 5.0.1.
- [Release notes](https://github.com/RomiC/ya-disk/releases)
- [Commits](RomiC/ya-disk@v3.0.1...v5.0.1)

---
updated-dependencies:
- dependency-name: ya-disk
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dx Changes relative to the Developer eXperience labels Aug 7, 2026
@dependabot dependabot Bot mentioned this pull request Aug 7, 2026
Closed
@dependabot @github

dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like ya-disk is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 8, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ya-disk-5.0.1 branch August 8, 2026 14:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@RomiC RomiC

Labels

dependencies Pull requests that update a dependency file dx Changes relative to the Developer eXperience

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@RomiC