Deps updates

DEPENDENCIES.md

@@ -261,20 +261,15 @@ graph LR;
 ## all dependencies
 ```mermaid
 graph LR;
-  abort-controller-->event-target-shim;
   agent-base-->debug;
   aggregate-error-->clean-stack;
   aggregate-error-->indent-string;
   ansi-styles-->color-convert;
-  are-we-there-yet-->delegates;
-  are-we-there-yet-->readable-stream;
   bin-links-->cmd-shim;
   bin-links-->npm-normalize-package-bin;
   bin-links-->read-cmd-shim;
   bin-links-->write-file-atomic;
   brace-expansion-->balanced-match;
-  buffer-->base64-js;
-  buffer-->ieee754;
   builtins-->semver;
   cacache-->fs-minipass;
   cacache-->glob;
@@ -759,11 +754,6 @@ graph LR;
   read-package-json-->npm-normalize-package-bin;
   read-package-json-fast-->json-parse-even-better-errors;
   read-package-json-fast-->npm-normalize-package-bin;
-  readable-stream-->abort-controller;
-  readable-stream-->buffer;
-  readable-stream-->events;
-  readable-stream-->process;
-  readable-stream-->string_decoder;
   semver-->lru-cache;
   shebang-command-->shebang-regex;
   sigstore-->sigstore-bundle["@sigstore/bundle"];
@@ -790,7 +780,6 @@ graph LR;
   string-width-->emoji-regex;
   string-width-->is-fullwidth-code-point;
   string-width-->strip-ansi;
-  string_decoder-->safe-buffer;
   strip-ansi-->ansi-regex;
   tar-->chownr;
   tar-->fs-minipass;

node_modules/.gitignore

@@ -46,7 +46,6 @@
 !/@tufjs/canonical-json
 !/@tufjs/models
 !/abbrev
-!/abort-controller
 !/agent-base
 !/aggregate-error
 !/ansi-regex
@@ -55,11 +54,9 @@
 !/archy
 !/are-we-there-yet
 !/balanced-match
-!/base64-js
 !/bin-links
 !/binary-extensions
 !/brace-expansion
-!/buffer
 !/builtins
 !/cacache
 !/chalk
@@ -95,15 +92,12 @@
 /debug/node_modules/*
 !/debug/node_modules/ms
 !/defaults
-!/delegates
 !/diff
 !/eastasianwidth
 !/emoji-regex
 !/encoding
 !/env-paths
 !/err-code
-!/event-target-shim
-!/events
 !/exponential-backoff
 !/fastest-levenshtein
 !/foreground-child
@@ -123,7 +117,6 @@
 !/http-proxy-agent
 !/https-proxy-agent
 !/iconv-lite
-!/ieee754
 !/ignore-walk
 !/imurmurhash
 !/indent-string
@@ -193,7 +186,6 @@
 !/path-scurry
 !/postcss-selector-parser
 !/proc-log
-!/process
 !/promise-all-reject-late
 !/promise-call-limit
 !/promise-inflight
@@ -204,9 +196,7 @@
 !/read-package-json-fast
 !/read-package-json
 !/read
-!/readable-stream
 !/retry
-!/safe-buffer
 !/safer-buffer
 !/semver
 !/semver/node_modules/
@@ -225,7 +215,6 @@
 !/spdx-expression-parse
 !/spdx-license-ids
 !/ssri
-!/string_decoder
 !/string-width-cjs
 !/string-width-cjs/node_modules/
 /string-width-cjs/node_modules/*

node_modules/@npmcli/git/lib/spawn.js

@@ -2,10 +2,10 @@ const spawn = require('@npmcli/promise-spawn')
 const promiseRetry = require('promise-retry')
 const log = require('proc-log')
 const makeError = require('./make-error.js')
-const whichGit = require('./which.js')
 const makeOpts = require('./opts.js')
 
 module.exports = (gitArgs, opts = {}) => {
+  const whichGit = require('./which.js')
   const gitPath = whichGit(opts)
 
   if (gitPath instanceof Error) {

node_modules/@npmcli/git/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@npmcli/git",
-  "version": "5.0.3",
+  "version": "5.0.4",
   "main": "lib/index.js",
   "files": [
     "bin/",
@@ -14,7 +14,7 @@
   "author": "GitHub Inc.",
   "license": "ISC",
   "scripts": {
-    "lint": "eslint \"**/*.js\"",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "snap": "tap",
     "test": "tap",
     "posttest": "npm run lint",
@@ -31,7 +31,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.18.0",
+    "@npmcli/template-oss": "4.21.3",
     "npm-package-arg": "^11.0.0",
     "slash": "^3.0.0",
     "tap": "^16.0.1"
@@ -51,13 +51,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.18.0",
-    "publish": true,
-    "ciVersions": [
-      "16.14.0",
-      "16.x",
-      "18.0.0",
-      "18.x"
-    ]
+    "version": "4.21.3",
+    "publish": true
   }
 }

node_modules/@npmcli/promise-spawn/lib/index.js

@@ -100,8 +100,8 @@ const spawnWithShell = (cmd, args, opts, extra) => {
     let pathToInitial
     try {
       pathToInitial = which.sync(initialCmd, {
-        path: (options.env && options.env.PATH) || process.env.PATH,
-        pathext: (options.env && options.env.PATHEXT) || process.env.PATHEXT,
+        path: (options.env && findInObject(options.env, 'PATH')) || process.env.PATH,
+        pathext: (options.env && findInObject(options.env, 'PATHEXT')) || process.env.PATHEXT,
       }).toLowerCase()
     } catch (err) {
       pathToInitial = initialCmd.toLowerCase()
@@ -192,4 +192,14 @@ const stdioResult = (stdout, stderr, { stdioString = true, stdio }) => {
   return result
 }
 
+// case insensitive lookup in an object
+const findInObject = (obj, key) => {
+  key = key.toLowerCase()
+  for (const objKey of Object.keys(obj).sort()) {
+    if (objKey.toLowerCase() === key) {
+      return obj[objKey]
+    }
+  }
+}
+
 module.exports = promiseSpawn

node_modules/@npmcli/promise-spawn/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@npmcli/promise-spawn",
-  "version": "7.0.0",
+  "version": "7.0.1",
   "files": [
     "bin/",
     "lib/"
@@ -16,7 +16,7 @@
   "scripts": {
     "test": "tap",
     "snap": "tap",
-    "lint": "eslint \"**/*.js\"",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "lintfix": "npm run lint -- --fix",
     "posttest": "npm run lint",
     "postsnap": "npm run lintfix --",
@@ -32,7 +32,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.18.0",
+    "@npmcli/template-oss": "4.21.3",
     "spawk": "^1.7.1",
     "tap": "^16.0.1"
   },
@@ -41,13 +41,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "ciVersions": [
-      "16.14.0",
-      "16.x",
-      "18.0.0",
-      "18.x"
-    ],
-    "version": "4.18.0",
+    "version": "4.21.3",
     "publish": true
   },
   "dependencies": {

node_modules/@npmcli/run-script/lib/signal-manager.js

@@ -1,9 +1,6 @@
 const runningProcs = new Set()
 let handlersInstalled = false
 
-// NOTE: these signals aren't actually forwarded anywhere. they're trapped and
-// ignored until all child processes have exited. in our next breaking change
-// we should rename this
 const forwardedSignals = [
   'SIGINT',
   'SIGTERM',
@@ -12,8 +9,12 @@ const forwardedSignals = [
 // no-op, this is so receiving the signal doesn't cause us to exit immediately
 // instead, we exit after all children have exited when we re-send the signal
 // to ourselves. see the catch handler at the bottom of run-script-pkg.js
-// istanbul ignore next - this function does nothing
-const handleSignal = () => {}
+const handleSignal = signal => {
+  for (const proc of runningProcs) {
+    proc.kill(signal)
+  }
+}
+
 const setupListeners = () => {
   for (const signal of forwardedSignals) {
     process.on(signal, handleSignal)

node_modules/@npmcli/run-script/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@npmcli/run-script",
-  "version": "7.0.2",
+  "version": "7.0.3",
   "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)",
   "author": "GitHub Inc.",
   "license": "ISC",
   "scripts": {
     "test": "tap",
     "eslint": "eslint",
-    "lint": "eslint \"**/*.js\"",
+    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
     "lintfix": "npm run lint -- --fix",
     "postlint": "template-oss-check",
     "snap": "tap",
@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.19.0",
+    "@npmcli/template-oss": "4.21.3",
     "require-inject": "^1.4.4",
     "tap": "^16.0.1"
   },
@@ -41,7 +41,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.19.0",
+    "version": "4.21.3",
     "publish": "true"
   },
   "tap": {