From 82d03b8fcbb947d374b43923dfd90073ac8b520b Mon Sep 17 00:00:00 2001 From: Andrii Oriekhov Date: Tue, 1 Sep 2026 16:32:05 +0300 Subject: [PATCH] chore(deps): update eventsource to ^4.1.1, eventsource-parser to ^3.1.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps the two client SSE dependencies to the newest releases that keep the declared `engines: node >=20` floor intact. eventsource v4 dropped only the unused `FetchLikeInit` type (superseded by `EventSourceFetchInit`), which this repo never imported — `sse.ts` uses `ErrorEvent` and `EventSourceInit`, both still exported. No source changes required. The pairing is deliberate: eventsource@4 declares `eventsource-parser: ^3.0.1`, so parser v3 is the version it requires. pnpm dedupes to a single shared copy (`eventsource@4.1.1 -> eventsource-parser: 3.1.1`), the same instance `streamableHttp.ts` imports directly via `eventsource-parser/stream`. Bumping the parser to v4 while holding eventsource at v4 would nest a second parser copy in the bundle. Staying off the latest majors on purpose: eventsource@5 and eventsource-parser@4 both require Node >=22.12 and ship ESM only, which would break the `>=20` engines floor, the Node 20 CI leg, and `require()` of the client's CJS bundle on Node 20. Co-Authored-By: Claude Opus 5 (1M context) --- pnpm-lock.yaml | 34 +++++++++++++++++++++------------- pnpm-workspace.yaml | 4 ++-- 2 files changed, 23 insertions(+), 15 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index c663ad7086..0e98377bbe 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -86,11 +86,11 @@ catalogs: specifier: ^7.0.5 version: 7.0.6 eventsource: - specifier: ^3.0.2 - version: 3.0.7 + specifier: ^4.1.1 + version: 4.1.1 eventsource-parser: - specifier: ^3.0.0 - version: 3.0.6 + specifier: ^3.1.1 + version: 3.1.1 jose: specifier: ^6.1.3 version: 6.2.2 @@ -1301,10 +1301,10 @@ importers: version: 7.0.6 eventsource: specifier: catalog:runtimeClientOnly - version: 3.0.7 + version: 4.1.1 eventsource-parser: specifier: catalog:runtimeClientOnly - version: 3.0.6 + version: 3.1.1 jose: specifier: catalog:runtimeClientOnly version: 6.2.2 @@ -4986,18 +4986,22 @@ packages: resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==} engines: {node: '>= 0.6'} - eventsource-parser@3.0.6: - resolution: {integrity: sha512-Vo1ab+QXPzZ4tCa8SwIHJFaSzy4R6SHf7BY79rFBDf0idraZWAkYrDjDj8uWaSm3S2TK+hJ7/t1CEmZ7jXw+pg==} - engines: {node: '>=18.0.0'} - eventsource-parser@3.0.8: resolution: {integrity: sha512-70QWGkr4snxr0OXLRWsFLeRBIRPuQOvt4s8QYjmUlmlkyTZkRqS7EDVRZtzU3TiyDbXSzaOeF0XUKy8PchzukQ==} engines: {node: '>=18.0.0'} + eventsource-parser@3.1.1: + resolution: {integrity: sha512-EKN1vKAMcZ8MlYMpaNuxN6R9yakzH6uajHcHVTqWJzvu5pWw9DyhbP35HH8MVBQ+dZjAfDxk+A8NiR9KWaXiyQ==} + engines: {node: '>=18.0.0'} + eventsource@3.0.7: resolution: {integrity: sha512-CRT1WTyuQoD771GW56XEZFQ/ZoSfWid1alKGDYMmkt2yl8UXrVR4pspqWNEcqKvVIzg6PAltWjxcSSPrboA4iA==} engines: {node: '>=18.0.0'} + eventsource@4.1.1: + resolution: {integrity: sha512-D6bTRWh6KahHTK/m4WnjPQyEinNPf9eFLEZSEoj7d6fTibspnAVYfzHvirL7u/aoX5d9YYfIkBVAhmigUELk9w==} + engines: {node: '>=20.0.0'} + expand-template@2.0.3: resolution: {integrity: sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==} engines: {node: '>=6'} @@ -9654,13 +9658,17 @@ snapshots: etag@1.8.1: {} - eventsource-parser@3.0.6: {} - eventsource-parser@3.0.8: {} + eventsource-parser@3.1.1: {} + eventsource@3.0.7: dependencies: - eventsource-parser: 3.0.6 + eventsource-parser: 3.0.8 + + eventsource@4.1.1: + dependencies: + eventsource-parser: 3.1.1 expand-template@2.0.3: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 3303ad0607..c8a2ab15bb 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -36,8 +36,8 @@ catalogs: vitest: ^4.0.15 runtimeClientOnly: cross-spawn: ^7.0.5 - eventsource: ^3.0.2 - eventsource-parser: ^3.0.0 + eventsource: ^4.1.1 + eventsource-parser: ^3.1.1 jose: ^6.1.3 runtimeServerOnly: '@hono/node-server': ^1.19.9