Upgrade dependencies to address security vulnerabilities

[ryanmcafee]

Summary

• Migrate from yarn to npm package manager
• Upgrade all major dependencies to latest versions
• Migrate ESLint from v8 to v9 with flat config format

Dependency Upgrades

Package	Old Version	New Version
jest	29.7.0	30.2.0
babel-jest	29.7.0	30.2.0
eslint	8.57.1	9.39.2
lint-staged	15.5.2	16.2.7
yargs	17.7.2	18.0.0
@typescript-eslint/eslint-plugin	6.x	8.53.0
@typescript-eslint/parser	6.x	8.53.0
eslint-plugin-jest	27.x	29.12.1

Breaking Changes Addressed

• ESLint 9: Migrated from .eslintrc to eslint.config.mjs (flat config format)
• Package Manager: Switched from yarn to npm, updated CI workflow accordingly
• GitHub Actions: Updated to latest action versions (checkout@v4, setup-node@v4)

Test plan

• Build passes (npm run build)
• TypeScript type checking passes (tsc --noEmit)
• Lint passes (npm run lint)
• CI workflow updated for npm

JIRA: https://jupiterone.atlassian.net/browse/PLATENG-880

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	husky@​8.0.3 ⏵ 9.1.7	+1		-17
	@​jupiterone/​eslint-config@​2.1.0 ⏵ 3.0.0	-2		-1	-3
	jest@​29.6.2 ⏵ 30.2.0	+1		+1
	@​typescript-eslint/​parser@​5.62.0 ⏵ 8.53.0			+1
	@​babel/​preset-typescript@​7.22.5 ⏵ 7.28.5
	@​babel/​preset-env@​7.22.10 ⏵ 7.28.6	+1		+1
	@​babel/​cli@​7.22.10 ⏵ 7.28.6	+1		+1
	@​babel/​core@​7.22.10 ⏵ 7.28.6			+1
	@​typescript-eslint/​eslint-plugin@​5.62.0 ⏵ 8.53.0	+2		+2
	ts-patch@​3.0.2 ⏵ 3.3.0
	prettier-plugin-organize-imports@​3.2.3 ⏵ 4.3.0
	babel-plugin-module-resolver@​5.0.0 ⏵ 5.0.2
	babel-jest@​29.6.2 ⏵ 30.2.0	+1		+6
	globals@​11.12.0 ⏵ 17.0.0			+3
	@​eslint/​eslintrc@​2.1.1 ⏵ 3.3.3	+1		+7
	yargs@​18.0.0
	typescript-transform-paths@​3.4.6 ⏵ 3.5.6
	typescript@​5.1.6 ⏵ 5.9.3
	prettier@​3.0.1 ⏵ 3.8.0				+3
	lint-staged@​13.2.3 ⏵ 16.2.7	+1		+1	+1
	eslint@​8.46.0 ⏵ 9.39.2	+5		+1	+46
	@​eslint/​js@​8.46.0 ⏵ 9.39.2			+14
	eslint-plugin-jest@​26.9.0 ⏵ 29.12.1			+1	+1

View full report