Skip to content

v1.0.0: ESM + numberstring upgrade#19

Merged
brianfunk merged 5 commits intomasterfrom
dev
Feb 1, 2026
Merged

v1.0.0: ESM + numberstring upgrade#19
brianfunk merged 5 commits intomasterfrom
dev

Conversation

@brianfunk
Copy link
Copy Markdown
Owner

Summary

  • Upgraded to ES modules (ESM)
  • Updated to numberstring v1.0.0 (from GitHub until npm publish)
  • Fixed npm audit vulnerabilities
  • Bumped version to 1.0.0

Breaking Changes

  • Package now uses ES modules (import/export)
  • Requires Node.js 18+

Test plan

  • All 16 tests passing
  • Syntax check passes
  • npm audit shows 0 vulnerabilities

🤖 Generated with Claude Code

brianfunk and others added 2 commits February 1, 2026 01:21
- Updated @aws-sdk/client-dynamodb and @aws-sdk/lib-dynamodb to latest
- Added override for fast-xml-parser@5.3.4 to fix high severity vulnerability

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
BREAKING CHANGES:
- Package now uses ES modules (import/export)
- Requires Node.js 18+
- Updated numberstring to v1.0.0 (from GitHub until npm publish)

Changes:
- Converted all require() to import statements
- Updated module.exports to export default
- Added "type": "module" to package.json
- Updated Jest config for ESM support
- Bumped version to 1.0.0
- Fixed npm audit vulnerabilities with fast-xml-parser override

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: bc63faac43

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread package-lock.json
Comment on lines +5812 to +5814
"node_modules/numberstring": {
"version": "1.0.0",
"resolved": "git+ssh://git@github.com/brianfunk/numberstring.git#c5db19ee4609a1ccbfa8700839a0f2c4762253c5",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Avoid git+ssh lock to prevent install failures

The lockfile now pins numberstring to a git+ssh:// URL, which makes npm install require GitHub SSH credentials. In CI or user environments without an SSH key, install fails even though the repo is public. If you want a GitHub dependency, prefer an HTTPS resolved URL in the lockfile or publish to npm so installs succeed without SSH access.

Useful? React with 👍 / 👎.

Comment thread package-lock.json
Comment on lines 206 to 208
"engines": {
"node": ">=18.0.0"
"node": ">=20.0.0"
}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Confirm Node 20 requirement after AWS SDK bump

The updated @aws-sdk/client-dynamodb package now declares node >=20. If your runtime is still Node 18 (as previously documented), installs will at least warn (or fail under engine-strict) and the SDK is outside its supported runtime. This effectively raises the minimum Node version, so either pin an SDK version that supports 18 or update the runtime requirements accordingly.

Useful? React with 👍 / 👎.

- Add engines field requiring Node >=20.0.0 (AWS SDK v3.980+ requires it)
- Use explicit git+https URL for numberstring dependency
- Regenerate package-lock.json

Note: npm still resolves to git+ssh internally, but GitHub Actions
handles this correctly. Once numberstring is published to npm,
update dependency to use npm package instead.

Addresses Codex review feedback on PR #19.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@brianfunk
Copy link
Copy Markdown
Owner Author

Both Codex suggestions addressed in commit 170b2c5:

  1. Node 20 requirement

    • Added "engines": { "node": ">=20.0.0" } to package.json
    • This matches the AWS SDK v3.980+ requirement
  2. git+ssh lock issue ⚠️ Partial fix

    • Changed dependency to explicit git+https:// URL
    • However, npm internally still resolves to git+ssh (known npm behavior)
    • CI tests pass because GitHub Actions has SSH access
    • TODO: Once numberstring is published to npm, update to use the npm package instead of GitHub reference

Thanks @codex for the helpful review!

@chatgpt-codex-connector
Copy link
Copy Markdown

To use Codex here, create an environment for this repo.

brianfunk and others added 2 commits February 1, 2026 01:37
- Replace Heroku badge with generic shields.io badge
- Update Node.js prerequisite to 20+ (AWS SDK requirement)
- Update Dockerfile example to use node:20-alpine

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@brianfunk brianfunk merged commit 0651f57 into master Feb 1, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant