Skip to content

deps: remove promise-inflight #223

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Feb 18, 2025
Merged

Conversation

owlstronaut
Copy link
Contributor

@owlstronaut owlstronaut commented Feb 13, 2025

The use of promise-inflight was originally intended to prevent duplicate concurrent git ls-remote calls. However, this scenario is rare, and the performance impact of duplicate calls is minimal. The existing LRU cache already prevents redundant requests over time.

Removing promise-inflight simplifies the code and removes a dependency often cited by security linters. This does mean duplicate inflight requests are now possible, but the expected impact is negligible. Should we want to make sure they don't happen, we could inline a solution fairly easily

@owlstronaut owlstronaut marked this pull request as ready for review February 13, 2025 22:27
@owlstronaut owlstronaut requested a review from a team as a code owner February 13, 2025 22:27
@wraithgar wraithgar changed the title fix: remove promise-inflight to simplify git ls-remote handling deps: remove promise-inflight Feb 18, 2025
@wraithgar wraithgar merged commit 618c70c into main Feb 18, 2025
22 checks passed
@wraithgar wraithgar deleted the owlstronaut/remove-promise-inflight branch February 18, 2025 17:21
@github-actions github-actions bot mentioned this pull request Feb 18, 2025
owlstronaut pushed a commit that referenced this pull request Feb 18, 2025
🤖 I have created a release *beep* *boop*
---


## [6.0.2](v6.0.1...v6.0.2)
(2025-02-18)
### Dependencies
*
[`618c70c`](618c70c)
[#223](#223) remove promise-inflight
(#223)
### Chores
*
[`29dfb33`](29dfb33)
[#222](#222) ensure tests correctly mock
environment variables before loading opts.js (#222) (@owlstronaut)
*
[`0fc4208`](0fc4208)
[#220](#220) bump npm-package-arg from
11.0.3 to 12.0.1 (#220) (@dependabot[bot])
*
[`52d8b0e`](52d8b0e)
[#221](#221) bump @npmcli/template-oss
from 4.23.3 to 4.24.1 (#221) (@dependabot[bot], @npm-cli-bot)

---
This PR was generated with [Release
Please](https://github.com./googleapis/release-please). See
[documentation](https://github.com./googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com.>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants