lob / lob-node / 26765406653

96%

master: 100%

push

github

chore: reduce Node.js threat surface — Node 24, ESLint 10 flat config, dep upgrades (#307)

* chore: reduce Node.js threat surface — deps, ESLint 10 flat config, CI pins

Dependency remediation (0 npm audit vulnerabilities):
- Remove coveralls (abandoned; no-fix critical chain via request/form-data/qs/tough-cookie)
- Upgrade axios ^1.13.2 → ^1.16.1 (fixes 16 high/moderate CVEs)
- Upgrade mocha ^10 → ^11.7.5; add overrides for serialize-javascript@^7.0.5 and diff@^9 to fix vulnerabilities bundled inside mocha 11
- Upgrade nock 14.0.10 → 14.0.15 (memory leak fix)
- Upgrade cross-env 5.2.1 → 10.1.0 (Node 20 minimum, CLI unchanged)
- Upgrade nyc 15.1.0 → 18.0.0 (CLI/config unchanged)
- Upgrade chai 2.3.0 → 4.5.0 (capped: v5+ is ESM-only)
- Upgrade p-map 2.1.0 → 4.0.0 (capped: v5+ is ESM-only)
- Upgrade csv-parse 4 → 6 (CJS dual-mode; fix destructured import and data-first arg order)
- Upgrade json-2-csv 3 → 5 (promise API replaces callback; fix prependHeader option casing)
- Upgrade eslint-plugin-lob 3.0.0 → 3.0.2
- Remove unused uuid devDependency

ESLint flat config migration (eslint 8 → 10, eslint-config-lob 5 → 7):
- Replace .eslintrc + .eslintignore with eslint.config.js (CommonJS flat config)
- Add @eslint/js, @stylistic/eslint-plugin, eslint-plugin-jsdoc, globals as devDependencies
- Migrate removed core rules: valid-jsdoc → jsdoc/check-*, no-negated-in-lhs → no-unsafe-negation, style rules → @stylistic/*
- Preserve examples/no-console:0 override and all repo globals from legacy config
- Fix 3 JSDoc @param {Object} → {object} in test/mocks/index.js (jsdoc/check-types)

GitHub Actions:
- Add Node 24 to CI matrix in run_tests.yml and forked_run_tests.yml
- Upgrade actions/checkout v2 → v4 and actions/setup-node v2 → v4
- Add npm@11 pin step to CI workflows
- Pin coverallsapp/github-action@master → @v2
- Update publish workflow to Node 24

Other:
- Add macOS section to .gitignore

* chore: upgrade Node to 24.15.0 and bump chai/p-map to latest

- Pin .... (continued)

165 of 174 branches covered (94.83%)

292 of 304 relevant lines covered (96.05%)

31.27 hits per line