Skip to content

Upgrade: Bump upath from 2.0.1 to 3.0.7#468

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/upath-3.0.7
Open

Upgrade: Bump upath from 2.0.1 to 3.0.7#468
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/upath-3.0.7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps upath from 2.0.1 to 3.0.7.

Changelog

Sourced from upath's changelog.

3.0.7

Patch Changes

  • 7f1590a: Fix @types/node >= 25 compatibility. PlatformPath was removed from @types/node v25; upath now derives its PlatformPath type from typeof path instead of re-exporting the removed interface. Works with @types/node v20 through v25+.

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[3.0.6] - 2026-04-09

Added

  • Polar.sh funding -- added to .github/FUNDING.yml and package.json alongside existing GitHub Sponsors and Tidelift.
  • "Who Uses upath" section in README -- trust signals with notable dependents (Chokidar, Nuxt, 1,300+ npm packages).
  • Architecture section in README -- explains the dynamic proxy pattern and how upath stays in sync with Node.js.

Changed

  • README revamped -- pain-first API docs showing path vs upath behavior side-by-side, inspired by the v2-era docs. Every extra function now explains why it exists (what path does wrong).
  • Deterministic docs/API.md generation -- test files are now sorted by name before the doc reporter processes them, eliminating spurious diffs caused by Jest's non-deterministic parallel execution order.

Fixed

  • Pre-commit hook now works in git worktrees without node_modules -- the hook falls back to the main worktree's node_modules/.bin when lint-staged isn't found locally.

[3.0.1] - [3.0.5]

Patch releases for CI/CD setup (Copybara bidirectional sync, Trusted Publishing OIDC), build fixes, and internal tooling. No user-facing API changes.

[3.0.0] - 2026-04-05

Breaking Changes

  • Node >= 20 required — dropped support for Node 4–18. Update your CI matrix and engines field.
  • CJS exports now include __esModule and default propertiesrequire('upath') still works for all standard usage (no .default needed). However, Object.keys(require('upath')) now includes "__esModule" and "default". Bundlers using Babel-style interop (mod.__esModule ? mod.default : mod) will resolve to .default, which IS the full upath object, so it works correctly.
  • TypeScript type params narrowedjoin(...paths: any[])join(...paths: string[]), same for resolve and joinSafe. If you pass non-string args, add explicit casts: join(myVar as string).
  • _makeLong removed from top-level exports — this was a deprecated Node.js internal. Use toNamespacedPath instead (available in upath v2+ and Node.js 8.3+). Note: _makeLong remains accessible via the .default property on CJS exports (it's part of the full path proxy), but this is not a supported API.
  • Boxed String objects no longer acceptednew String('foo') is rejected; use plain string primitives. This is unlikely to affect anyone.

Added

  • TypeScript rewrite — full type safety, source-of-truth types shipped with the package.
  • Dual CJS/ESMimport and require() both work via package.json exports.
  • Named ESM importsimport { normalize, join, toUnix } from 'upath'.
  • matchesGlob typed export (wraps Node 22+ path.matchesGlob).
  • toNamespacedPath typed export.
  • UPath interface exported for TypeScript consumers.

... (truncated)

Commits
  • 21e4af3 ci: add changesets publish workflow
  • 26b7a34 Merge pull request #4 from anodynos/changeset-release/master
  • 76d9173 fix(release): remove @​changesets/changelog-github from package.json
  • 839c5f5 Merge pull request #3 from anodynos/chore/UP-changesets-release-automation
  • 6455ede Merge pull request #2 from anodynos/chore/UP-changesets-release-automation
  • f642d36 Merge remote-tracking branch 'origin/master'
  • 883ea66 chore(.gitignore): .temp-bridge/ .playwright-mcp/
  • 6643fab chore(): Update README with security contact details
  • a138a60 ci: add GitHub Actions CI — build + test + lint on PRs [AZ-730]
  • 76ca210 feat(dx): add ESLint v9 flat config with typescript-eslint [AZ-731]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for upath since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 27, 2026
Bumps [upath](https://github.com/anodynos/upath) from 2.0.1 to 3.0.7.
- [Changelog](https://github.com/anodynos/upath/blob/master/CHANGELOG.md)
- [Commits](anodynos/upath@v2.0.1...v3.0.7)

---
updated-dependencies:
- dependency-name: upath
  dependency-version: 3.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/upath-3.0.7 branch from 497eda7 to d127023 Compare May 9, 2026 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants