Replace archiver with tar-fs for MRT bundle creation (#274)

* Replace archiver with tar-fs for MRT bundle creation

archiver depends on archiver-utils which pulls in the deprecated
glob@10.5.0. Since we only use archiver for tar (not zip), replace it
with tar-fs which has minimal dependencies (pump + tar-stream) and no
glob dependency. Net removal of 171 packages.

* Upgrade c8 from 10.x to 11.x to remove glob@10.5.0 from dev deps

c8@11 uses test-exclude@8 which depends on glob@13 instead of the
deprecated glob@10.5.0.

Author: clavery

.changeset/replace-archiver-with-tar-fs.md

@@ -0,0 +1,5 @@
+---
+'@salesforce/b2c-tooling-sdk': patch
+---
+
+Replace `archiver` with `tar-fs` for MRT bundle creation, removing deprecated `glob@10.5.0` from the production dependency tree

packages/b2c-tooling-sdk/package.json

@@ -348,7 +348,7 @@
     "@oclif/prettier-config": "catalog:",
     "@oclif/test": "catalog:",
     "@salesforce/dev-config": "catalog:",
-    "@types/archiver": "^7.0.0",
+    "@types/tar-fs": "^2.0.4",
     "@types/chai": "catalog:",
     "@types/ejs": "^3.1.5",
     "@types/mocha": "catalog:",
@@ -384,7 +384,7 @@
   },
   "dependencies": {
     "applicationinsights": "2.9.8",
-    "archiver": "7.0.1",
+    "tar-fs": "3.1.2",
     "chokidar": "5.0.0",
     "cliui": "catalog:",
     "ejs": "3.1.10",

packages/b2c-tooling-sdk/src/operations/mrt/bundle.ts

@@ -15,10 +15,9 @@ import {createWriteStream} from 'node:fs';
 import {readFile, stat, mkdtemp, rm} from 'node:fs/promises';
 import path from 'node:path';
 import os from 'node:os';
-import archiver from 'archiver';
+import tar from 'tar-fs';
 import {Minimatch} from 'minimatch';
 import {getLogger} from '../../logging/logger.js';
-import type {Stats} from 'node:fs';
 
 /**
  * Default SSR parameters applied to all bundles.
@@ -210,26 +209,25 @@ export async function createBundle(options: CreateBundleOptions): Promise<Bundle
     // Create tar archive
     await new Promise<void>((resolve, reject) => {
       const output = createWriteStream(tarPath);
-      const archive = archiver('tar');
-
-      archive.pipe(output);
 
       // Prefix all files with {projectSlug}/bld/
-      const newRoot = path.join(projectSlug, 'bld', '');
-
-      archive.directory(buildPath, false, (entry) => {
-        const stats = entry.stats as Stats | undefined;
-        if (stats?.isFile() && entry.name) {
-          filesInArchive.push(entry.name);
-        }
-        entry.prefix = newRoot;
-        return entry;
+      const newRoot = path.join(projectSlug, 'bld');
+
+      const pack = tar.pack(buildPath, {
+        map(header) {
+          if (header.type === 'file') {
+            filesInArchive.push(header.name);
+          }
+          header.name = path.join(newRoot, header.name);
+          return header;
+        },
       });
 
-      archive.on('error', reject);
+      pack.on('error', reject);
+      output.on('error', reject);
       output.on('finish', resolve);
 
-      archive.finalize();
+      pack.pipe(output);
     });
 
     logger.debug({fileCount: filesInArchive.length}, '[MRT] Archive created');