feat!: use latest arborist 6 and drop support for node 12 and 14

[derberg]

• we are 4 versions behind arborist
• as workaround we used hidden info from arborits, but time to change that -> [QUESTION] How to access information about the package what was added/installed npm/arborist#243 (comment)

BREAKING CHANGE:

tl;dr the only breaking change is that you will no longer be able to install Generator when using Node 12 or 14. This will break pipelines for people.

We need to explicitly require:

  "engines": {
    "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
  },

Because this is what latest Arborist requires.

Node 12 is already not maintained by node folks, and Node 14 support finishes on April 30, this is why I suggest to also not support Node 14.

---

TODO: this PR cannot be merged before we update global pipelines to run on Node 16. Different story though. Review and approval of this PR is not blocked by this. You only need to know that this is why tests fail

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

[fmvilas]

Do it!

[D1X7R4]

Hi!

Is there any progress on this?

Thanks in advance.

[derberg]

@D1X7R4 why, do you need this chang?

[D1X7R4]

Snyk vulnerabilities findings

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity 😴

It will be closed in 120 days if no further activity occurs. To unstale this pull request, add a comment with detailed explanation.

There can be many reasons why some specific pull request has no activity. The most probable cause is lack of time, not lack of interest. AsyncAPI Initiative is a Linux Foundation project not owned by a single for-profit company. It is a community-driven initiative ruled under open governance model.

Let us figure out together how to push this pull request forward. Connect with us through one of many communication channels we established here.

Thank you for your patience ❤️

[derberg]

@D1X7R4 fyi I'm dropping this PR. #1061 should solve what you need. I found that one major version less of Arborist will not drop node 12 support - so linked PR will use it for now. Jumping from version 2.2.4 to 5.6.3 should solve many security issues