Skip to content

Conversation

richardlau
Copy link
Member

Node.js 20.19.5 updated CJS Module Lexer so it is now in the same layout on the filesystem as in later versions.


Fixes:
e.g. https://github.com/nodejs/nodejs-dependency-vuln-assessments/actions/runs/17875656424/job/50836684901#step:6:15

Traceback (most recent call last):
  File "/home/runner/work/nodejs-dependency-vuln-assessments/nodejs-dependency-vuln-assessments/dep_checker/main.py", line 261, in <module>
    exit(main())
  File "/home/runner/work/nodejs-dependency-vuln-assessments/nodejs-dependency-vuln-assessments/dep_checker/main.py", line 234, in main
    list() if gh_token is None else query_ghad(dependencies, gh_token, repo_path)
  File "/home/runner/work/nodejs-dependency-vuln-assessments/nodejs-dependency-vuln-assessments/dep_checker/main.py", line 113, in query_ghad
    dep_version = dep.version_parser(repo_path)
  File "/home/runner/work/nodejs-dependency-vuln-assessments/nodejs-dependency-vuln-assessments/dep_checker/dependencies.py", line 143, in <lambda>
    else vp.get_cjs_lexer_version_old(repo_path)
  File "/home/runner/work/nodejs-dependency-vuln-assessments/nodejs-dependency-vuln-assessments/dep_checker/versions_parser.py", line 52, in get_cjs_lexer_version_old
    return get_package_json_version(repo_path / "deps/cjs-module-lexer/package.json")
  File "/home/runner/work/nodejs-dependency-vuln-assessments/nodejs-dependency-vuln-assessments/dep_checker/versions_parser.py", line 8, in get_package_json_version
    with open(path, "r") as f:
FileNotFoundError: [Errno 2] No such file or directory: '../node/deps/cjs-module-lexer/package.json'
Error: Process completed with exit code 1.

Node.js 20.19.5 updated CJS Module Lexer so it is now in the same layout on the filesystem as in later versions.
@richardlau
Copy link
Member Author

@RafaelGSS RafaelGSS merged commit 193ecf9 into main Sep 20, 2025
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants