From 5690ff2610bb1ed8d6a02a1fce886dc83373d26a Mon Sep 17 00:00:00 2001
From: Jordan Harband <ljharb@gmail.com>
Date: Tue, 30 Jul 2024 22:06:48 -0700
Subject: [PATCH] [Breaking] update `@npmcli/arborist`; require node 16+

---
 .github/workflows/node.yml | 9 +--------
 package.json               | 8 +++-----
 test/index.js              | 2 +-
 3 files changed, 5 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/node.yml b/.github/workflows/node.yml
index 72dfd76..d3eebf9 100644
--- a/.github/workflows/node.yml
+++ b/.github/workflows/node.yml
@@ -6,13 +6,6 @@ jobs:
   tests:
     uses: ljharb/actions/.github/workflows/node.yml@main
     with:
-      range: '>= 16 || ^14.15 || ^12.13'
+      range: '>= 22 || ^20.9 || ^18.12 || ^16.14'
       type: minors
       command: npm run tests-only
-
-  node:
-    name: 'node'
-    needs: [tests]
-    runs-on: ubuntu-latest
-    steps:
-      - run: 'echo tests completed'
diff --git a/package.json b/package.json
index 0f40eb6..6472769 100644
--- a/package.json
+++ b/package.json
@@ -40,22 +40,20 @@
 	},
 	"homepage": "https://github.com/ljharb/npm-lockfile#readme",
 	"dependencies": {
-		"@npmcli/arborist": "=5.2.1",
+		"@npmcli/arborist": "^7.5.4",
 		"colors": "=1.4.0",
 		"find-package-json": "^1.2.0",
-		"object-inspect": "^1.12.3",
-		"pacote": "=13.6.0",
+		"object-inspect": "^1.13.2",
 		"yargs": "^17.7.2"
 	},
 	"engines": {
-		"node": ">= 16 || ^14.15 || ^12.13"
+		"node": ">= 22 || ^20.9 || ^18.12 || ^16.14"
 	},
 	"devDependencies": {
 		"@ljharb/eslint-config": "^21.1.1",
 		"aud": "^2.0.4",
 		"auto-changelog": "^2.4.0",
 		"eslint": "=8.8.0",
-		"jackspeak": "=2.1.1",
 		"npmignore": "^0.3.1",
 		"nyc": "^10.3.2",
 		"safe-publish-latest": "^2.0.0",
diff --git a/test/index.js b/test/index.js
index 741999a..ff8269d 100644
--- a/test/index.js
+++ b/test/index.js
@@ -12,7 +12,7 @@ test('simple test', (t) => {
 	execSync(`"${path.join(__dirname, '../bin.js')}" -o package-lock.json --date=now`);
 	const lockPackage = readFileSync(lockPath, { encoding: 'utf-8' });
 	t.ok(lockPackage, 'lockfile produced by package');
-	execSync('npm install --package-lock --package-lock-only', { encoding: 'utf-8' });
+	execSync('npm install --package-lock --package-lock-only', { encoding: 'utf-8', cwd: path.join(__dirname, '..') });
 	const lockActual = readFileSync(lockPath, { encoding: 'utf-8' });
 	t.ok(lockActual, 'lockfile produced by npm');
 	unlinkSync(lockPath);