tar and node-gyp versions bump #1835

Activity

1. igeto

   added

   feature request

   on Jun 19, 2025
2. Jan-Wilamowski-Clario commented on Jun 25, 2025

   

   Jan-Wilamowski-Clario

   on Jun 25, 2025

   More actions

   relatedly, I get this deprecation warning: npm warn deprecated @npmcli/move-file@1.1.2: This functionality has been moved to @npmcli/fs

   which is caused by a string of outdated dependencies even though I use the latest sqlite version:

   my-project
   └─┬ sqlite3@5.1.7
     └─┬ node-gyp@8.4.1
       └─┬ make-fetch-happen@9.1.0
         └─┬ cacache@15.3.0
           └── @npmcli/move-file@1.1.2
   
3. brian6932 commented on Nov 3, 2025

   

   brian6932

   on Nov 3, 2025

   Last edited by brian6932

   More actions

   node-gyp 8.x can't even recognize modern Windows SDKs. When I set an 11.x override in package.json, the problem goes away.

   {
   	"pnpm": {
   		"overrides": {
   			"node-gyp": "11.x"
   		}
   	},
   	"overrides": {
   		"node-gyp": "11.x"
   	}
   }

   👍React with 👍1Reacted by Igor
4. igeto commented on Dec 11, 2025

   

   igeto

   on Dec 11, 2025

   Author

   More actions

   Any info on this? Will we get a version bump with fix for these vulnerabilities?
5. amirrossert commented on Feb 24, 2026

   

   amirrossert

   on Feb 24, 2026

   More actions

   Is this going to be addressed?