[Snyk] Upgrade fs-extra from 9.1.0 to 11.3.6

[mhill-os]

Snyk has created this PR to upgrade fs-extra from 9.1.0 to 11.3.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 14 versions ahead of your current version.

• The recommended version was released 22 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: fs-extra

• 11.3.6 - 2026-06-29
  

  11.3.6

• 11.3.5 - 2026-05-06
  

  11.3.5

• 11.3.4 - 2026-03-03
  

  11.3.4

• 11.3.3 - 2025-12-18
  

  11.3.3

• 11.3.2 - 2025-09-15
  

  11.3.2

• 11.3.1 - 2025-08-05
  

  11.3.1

• 11.3.0 - 2025-01-15
  

  11.3.0

• 11.2.0 - 2023-11-28
  

  11.2.0

• 11.1.1 - 2023-03-20
  

  11.1.1

• 11.1.0 - 2022-11-29
  

  11.1.0

• 11.0.0 - 2022-11-28
• 10.1.0 - 2022-04-16
• 10.0.1 - 2022-02-22
• 10.0.0 - 2021-05-03
• 9.1.0 - 2021-01-19

from fs-extra GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mhill-os]

This major version upgrade of fs-extra from 9.x to 11.x introduces significant breaking changes, including API modifications and dropped support for older Node.js versions.

Key Breaking Changes:

• fs.read() & fs.write() Promises (v10.0.0): The promisified versions of fs.read() and fs.write() now return an object ({ buffer, bytesRead } or { buffer, bytesWritten }) instead of just the buffer. Code using these promises must be updated to access the buffer from the returned object.
• Node.js Version Support: Support for older, end-of-life Node.js versions has been removed. While not explicitly stated for each release, the library follows a pattern of dropping Node versions with major updates. Users on older Node.js runtimes (likely below Node.js 12) will need to upgrade their environment.
• move() Behavior (v10.0.0): The move() function will now throw an error if the destination path is a subdirectory of the source path.
• ESM and exports field (v11.0.0): The package now includes an exports field in package.json to improve ESM support, which can affect module resolution in some build tools and TypeScript projects.

Recommendation:
Due to the changes in the promise API for read() and write(), a careful review of the code is required. Search your codebase for promise-based calls to these functions (.then() or await) and update them to handle the new object return structure. Verify your Node.js runtime version is compatible.

Source: CHANGELOG.md

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[mhill-os]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.