chore: bump fs-extra from 10.0.0 to 11.2.0

[threema-danilo]

No description provided.

[erickzhao]

Hey @threema-danilo, we generally don't accept dependency bump PRs from outside contributors.

Is there a particular reason that you wanted to see this dependency bump (along with similar PRs in different repos)? I don't see a description in any of the other PRs.

electron/notarize#198
electron/fuses#44
electron/rebuild#1139

[threema-danilo]

@erickzhao hi! Yes, the reason is that we were having issues with the NodeJS version resolution algorithm in combination with local file: dependencies. For some reason, NodeJS would resolve fs-extra to a different version than the one required by our local library.

Upon closer inspection I noticed that there were about 4 different versions of fs-extra included in the various electron libs. I hoped that bringing the versions more in line would help.

we generally don't accept dependency bump PRs from outside contributors

That's fine, but I'd like to note that some of the libraries still contain very old dependencies, like TypeScript 4.0 in electron/rebuild. Some libs also declare compatibility with Node 10, where LTS security support ended more than 3 years ago. Some maintenance there would make non-dependency-bump contributions easier.

[erickzhao]

Thanks for the clarification! Will bring this up to other maintainers as well and hopefully have some forward momentum on this. :)

[dsanders11]

Circling back around to this, I'm going to close these various PRs. We have a plan to do a minimum Node.js version bump across our ecosystem within the next 6 months (hopefully sooner than later) at which point we can come back to these bumps which would otherwise be breaking changes. In general I also have a loose plan to remove fs-extra usage where possible after that bump, as some of the functionality we use fs-extra for is now built into newer Node.js versions.

Thanks for the PRs, though! The situation should improve in the near future.