balena-cli 23.2.21 → 23.2.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "balena-cli",
-  "version": "23.2.21",
+  "version": "23.2.22",
   "description": "The official balena Command Line Interface",
   "main": "./build/app.js",
   "homepage": "https://github.com/balena-io/balena-cli",
@@ -256,6 +256,6 @@
     }
   },
   "versionist": {
-    "publishedAt": "2026-01-13T21:32:28.241Z"
+    "publishedAt": "2026-01-14T11:22:38.472Z"
   }
 }

package/src/app.ts

@@ -51,24 +51,14 @@ async function checkNodeVersion() {
 }
 
 /** Setup balena-sdk options that are shared with imported packages */
-function setupBalenaSdkSharedOptions(settings: CliSettings) {
-	const BalenaSdk = require('balena-sdk') as typeof import('balena-sdk');
+async function setupBalenaSdkSharedOptions(settings: CliSettings) {
+	const BalenaSdk = await import('balena-sdk');
 	BalenaSdk.setSharedOptions({
 		apiUrl: settings.get<string>('apiUrl'),
 		dataDirectory: settings.get<string>('dataDirectory'),
 	});
 }
 
-/**
- * Addresses the console warning:
- * (node:49500) MaxListenersExceededWarning: Possible EventEmitter memory
- * leak detected. 11 error listeners added. Use emitter.setMaxListeners() to
- * increase limit
- */
-export function setMaxListeners(maxListeners: number) {
-	require('events').EventEmitter.defaultMaxListeners = maxListeners;
-}
-
 /** Selected CLI initialization steps */
 async function init() {
 	if (process.env.BALENARC_NO_SENTRY) {
@@ -85,7 +75,7 @@ async function init() {
 	// Proxy setup should be done early on, before loading balena-sdk
 	await (await import('./utils/proxy')).setupGlobalHttpProxy(settings);
 
-	setupBalenaSdkSharedOptions(settings);
+	await setupBalenaSdkSharedOptions(settings);
 
 	// check for CLI updates once a day
 	if (!process.env.BALENARC_OFFLINE_MODE) {
@@ -190,7 +180,7 @@ export async function run(cliArgs = process.argv, options: AppOptions) {
 		await init();
 
 		// Look for commands that have been removed and if so, exit with a notice
-		checkDeletedCommand(cliArgs.slice(2));
+		await checkDeletedCommand(cliArgs.slice(2));
 
 		const args = await preparseArgs(cliArgs);
 		await oclifRun(args, options);

package/src/commands/config/write.ts

@@ -68,7 +68,7 @@ export default class ConfigWriteCmd extends Command {
 		const configJSON = await config.read(drive);
 
 		console.info(`Setting ${params.key} to ${params.value}`);
-		ConfigWriteCmd.updateConfigJson(configJSON, params.key, params.value);
+		await ConfigWriteCmd.updateConfigJson(configJSON, params.key, params.value);
 
 		await denyMount(drive, async () => {
 			await safeUmount(drive);
@@ -84,8 +84,12 @@ export default class ConfigWriteCmd extends Command {
 	}
 
 	/** Call Lodash's _.setWith(). Moved here for ease of testing. */
-	static updateConfigJson(configJSON: object, key: string, value: string) {
-		const _ = require('lodash') as typeof import('lodash');
+	static async updateConfigJson(
+		configJSON: object,
+		key: string,
+		value: string,
+	) {
+		const _ = await import('lodash');
 		// note: _.setWith() is needed instead of _.set() because, given a key
 		// like `os.udevRules.101`, _.set() creates a udevRules array (rather
 		// than a dictionary) and sets the 101st array element to value, while

package/src/commands/deploy/index.ts

@@ -319,7 +319,7 @@ ${dockerignoreHelp}
 
 			let release: Pick<Release['Read'], 'commit' | 'id'>;
 			if (appType.slug === 'legacy-v1' || appType.slug === 'legacy-v2') {
-				const { deployLegacy } = require('../../utils/deploy-legacy');
+				const { deployLegacy } = await import('../../utils/deploy-legacy');
 
 				const ux = getCliUx();
 				const msg = ux.colorize(

package/src/commands/device/ssh.ts

@@ -127,7 +127,7 @@ export default class DeviceSSHCmd extends Command {
 		} = await import('../../utils/patterns');
 		const sdk = getBalenaSdk();
 
-		const proxyConfig = getProxyConfig();
+		const proxyConfig = await getProxyConfig();
 		const useProxy = !!proxyConfig && !options.noproxy;
 
 		// this will be a tunnelled SSH connection...

package/src/deprecation.ts

@@ -205,14 +205,13 @@ or release date not available`);
 			const { ExpectedError } = await import('./errors');
 			throw new ExpectedError(this.getExpiryMsg(daysElapsed));
 		} else if (daysElapsed > this.deprecationDays && process.stderr.isTTY) {
-			console.error(this.getDeprecationMsg(daysElapsed));
+			console.error(await this.getDeprecationMsg(daysElapsed));
 		}
 	}
 
 	/** Separate function for the benefit of code testing */
-	getDeprecationMsg(daysElapsed: number) {
-		const { warnify } =
-			require('./utils/messages') as typeof import('./utils/messages');
+	async getDeprecationMsg(daysElapsed: number) {
+		const { warnify } = await import('./utils/messages');
 		return warnify(`\
 CLI version ${this.nextMajorVersion} was released ${daysElapsed} days ago: please upgrade.
 This version of the balena CLI (${this.currentVersion}) will exit with an error

package/src/help.ts

@@ -52,7 +52,7 @@ export default class BalenaHelp extends Help {
 		const subject = getHelpSubject(argv);
 		if (!subject) {
 			const verbose = argv.includes('-v') || argv.includes('--verbose');
-			console.log(this.getCustomRootHelp(verbose));
+			console.log(await this.getCustomRootHelp(verbose));
 			return;
 		}
 
@@ -89,7 +89,7 @@ export default class BalenaHelp extends Help {
 		);
 	}
 
-	getCustomRootHelp(showAllCommands: boolean): string {
+	async getCustomRootHelp(showAllCommands: boolean): Promise<string> {
 		const ux = getCliUx();
 		let commands = this.config.commands;
 		// eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing
@@ -155,8 +155,9 @@ See: https://git.io/JRHUW#deprecation-policy`,
 		];
 		globalOps[0][0] = globalOps[0][0].padEnd(cmdLength);
 
-		const { deprecationPolicyNote, reachingOut } =
-			require('./utils/messages') as typeof import('./utils/messages');
+		const { deprecationPolicyNote, reachingOut } = await import(
+			'./utils/messages'
+		);
 
 		return [
 			ux.colorize('bold', 'USAGE'),

package/src/preparser.ts

@@ -104,8 +104,8 @@ function extractBooleanFlag(argv: string[], flag: string): boolean {
  * Check whether the command line refers to a command that has been deprecated
  * and removed and, if so, exit with an informative error message.
  */
-export function checkDeletedCommand(argvSlice: string[]): void {
-	const { ExpectedError } = require('./errors') as typeof import('./errors');
+export async function checkDeletedCommand(argvSlice: string[]): Promise<void> {
+	const { ExpectedError } = await import('./errors');
 
 	if (argvSlice[0] === 'help') {
 		argvSlice = argvSlice.slice(1);

package/src/utils/compose.ts

@@ -17,7 +17,7 @@
 
 import type { Renderer } from './compose_ts';
 import type * as SDK from 'balena-sdk';
-import type Dockerode = require('dockerode');
+import type * as Dockerode from 'dockerode';
 import * as path from 'path';
 import type { Composition, ImageDescriptor } from '@balena/compose/dist/parse';
 import type { RetryParametersObj } from 'pinejs-client-core';

package/src/utils/compose_ts.ts

@@ -570,7 +570,7 @@ async function inspectBuiltImages({
 		),
 	);
 
-	const humanize = require('humanize');
+	const humanize = await import('humanize');
 	const summaryMsgByService: { [serviceName: string]: string } = {};
 	for (const image of images) {
 		summaryMsgByService[image.serviceName] = `Image size: ${humanize.filesize(
@@ -775,7 +775,11 @@ export async function tarDirectory(
 	const serviceDirs = await getServiceDirsFromComposition(dir, composition);
 	const { filteredFileList, dockerignoreFiles } =
 		await filterFilesWithDockerignore(dir, multiDockerignore, serviceDirs);
-	printDockerignoreWarn(dockerignoreFiles, serviceDirs, multiDockerignore);
+	await printDockerignoreWarn(
+		dockerignoreFiles,
+		serviceDirs,
+		multiDockerignore,
+	);
 	void (async () => {
 		try {
 			for (const fileStats of filteredFileList) {
@@ -826,7 +830,7 @@ export async function tarDirectory(
  * @param serviceDirsByService Map of service names to service subdirectories
  * @param multiDockerignore Whether --multi-dockerignore (-m) was provided
  */
-function printDockerignoreWarn(
+async function printDockerignoreWarn(
 	dockerignoreFiles: Array<import('./ignore').FileStats>,
 	serviceDirsByService: Dictionary<string>,
 	multiDockerignore: boolean,
@@ -900,7 +904,7 @@ function printDockerignoreWarn(
 		}
 	}
 	if (msg.length) {
-		const { warnify } = require('./messages') as typeof import('./messages');
+		const { warnify } = await import('./messages');
 		logFunc.call(logger, ' \n' + warnify(msg.join('\n'), ''));
 	}
 }

package/src/utils/deploy-legacy.ts

@@ -21,23 +21,23 @@ import type * as Dockerode from 'dockerode';
 import type Logger = require('./logger');
 import type got from 'got';
 
-const getBuilderPushEndpoint = function (
+const getBuilderPushEndpoint = async function (
 	baseUrl: string,
 	owner: string,
 	app: string,
 ) {
-	const querystring = require('querystring') as typeof import('querystring');
+	const querystring = await import('querystring');
 	const args = querystring.stringify({ owner, app });
 	return `https://builder.${baseUrl}/v1/push?${args}`;
 };
 
-const getBuilderLogPushEndpoint = function (
+const getBuilderLogPushEndpoint = async function (
 	baseUrl: string,
 	buildId: number,
 	owner: string,
 	app: string,
 ) {
-	const querystring = require('querystring') as typeof import('querystring');
+	const querystring = await import('querystring');
 	const args = querystring.stringify({ owner, app, buildId });
 	return `https://builder.${baseUrl}/v1/pushLogs?${args}`;
 };
@@ -47,12 +47,12 @@ const getBuilderLogPushEndpoint = function (
  * @param {string} imageId
  * @param {string} bufferFile
  */
-const bufferImage = function (
+const bufferImage = async function (
 	docker: Dockerode,
 	imageId: string,
 	bufferFile: string,
 ): Promise<NodeJS.ReadableStream & { length: number }> {
-	const streamUtils = require('./streams') as typeof import('./streams');
+	const streamUtils = await import('./streams');
 
 	const image = docker.getImage(imageId);
 	const sizePromise = image.inspect().then((img) => img.Size);
@@ -141,7 +141,7 @@ const uploadImage = async function (
 	);
 
 	const uploadRequest = got.stream.post(
-		getBuilderPushEndpoint(url, username, appName),
+		await getBuilderPushEndpoint(url, username, appName),
 		{
 			headers: {
 				'Content-Encoding': 'gzip',
@@ -168,14 +168,17 @@ const uploadLogs = async function (
 	appName: string,
 ) {
 	const { default: got } = await import('got');
-	return got.post(getBuilderLogPushEndpoint(url, buildId, username, appName), {
-		headers: {
-			Authorization: `Bearer ${token}`,
+	return got.post(
+		await getBuilderLogPushEndpoint(url, buildId, username, appName),
+		{
+			headers: {
+				Authorization: `Bearer ${token}`,
+			},
+			body: Buffer.from(logs),
+			responseType: 'json',
+			throwHttpErrors: false,
 		},
-		body: Buffer.from(logs),
-		responseType: 'json',
-		throwHttpErrors: false,
-	});
+	);
 };
 
 /**
@@ -196,7 +199,8 @@ export const deployLegacy = async function (
 		shouldUploadLogs: boolean;
 	},
 ): Promise<number> {
-	const tmp = require('tmp') as typeof import('tmp');
+	const tmp = await import('tmp');
+	const { promises: fs } = await import('fs');
 	const tmpNameAsync = promisify(tmp.tmpName);
 
 	// Ensure the tmp files gets deleted
@@ -216,10 +220,7 @@ export const deployLegacy = async function (
 			// If the file was never written to (for instance because an error
 			// has occured before any data was written) this call will throw an
 			// ugly error, just suppress it
-
-			(require('fs') as typeof import('fs')).promises
-				.unlink(bufferFile)
-				.catch(() => undefined),
+			fs.unlink(bufferFile).catch(() => undefined),
 		);
 
 	if (shouldUploadLogs) {

package/src/utils/helpers.ts

@@ -90,8 +90,7 @@ export async function sudo(
 }
 
 export async function runCommand<T>(commandArgs: string[]): Promise<T> {
-	const { isSubcommand } =
-		require('../preparser') as typeof import('../preparser');
+	const { isSubcommand } = await import('../preparser');
 	if (await isSubcommand(commandArgs)) {
 		commandArgs = [
 			commandArgs[0] + ':' + commandArgs[1],
@@ -99,7 +98,7 @@ export async function runCommand<T>(commandArgs: string[]): Promise<T> {
 		];
 	}
 
-	const { run } = require('@oclif/core') as typeof import('@oclif/core');
+	const { run } = await import('@oclif/core');
 	return run(commandArgs) as Promise<T>;
 }
 
@@ -323,14 +322,17 @@ export function isWindowsComExeShell() {
  * functions, set this to false because child_process.spawn() always uses
  * env.ComSpec (cmd.exe) on Windows, even when running on MSYS / MSYS2.
  */
-export function shellEscape(args: string[], detectShell = false): string[] {
+export async function shellEscape(
+	args: string[],
+	detectShell = false,
+): Promise<string[]> {
 	const isCmdExe = detectShell
 		? isWindowsComExeShell()
 		: process.platform === 'win32';
 	if (isCmdExe) {
 		return args.map((v) => windowsCmdExeEscapeArg(v));
 	} else {
-		const shellEscapeFunc: typeof import('shell-escape') = require('shell-escape');
+		const shellEscapeFunc = await import('shell-escape');
 		return args.map((v) => shellEscapeFunc([v]));
 	}
 }
@@ -364,7 +366,7 @@ export interface ProxyConfig {
  * Check whether a proxy has been configured (whether global-tunnel-ng or
  * global-agent) and if so, return a ProxyConfig object.
  */
-export function getProxyConfig(): ProxyConfig | undefined {
+export async function getProxyConfig(): Promise<ProxyConfig | undefined> {
 	const tunnelNgConfig: any = (global as any).PROXY_CONFIG;
 	// global-tunnel-ng
 	if (tunnelNgConfig) {
@@ -390,7 +392,7 @@ export function getProxyConfig(): ProxyConfig | undefined {
 		// eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing
 		const proxyUrl = process.env.HTTPS_PROXY || process.env.HTTP_PROXY;
 		if (proxyUrl) {
-			const { URL } = require('url') as typeof import('url');
+			const { URL } = await import('url');
 			let url: InstanceType<typeof URL>;
 			try {
 				url = new URL(proxyUrl);

package/src/utils/qemu.ts

@@ -16,8 +16,9 @@
  */
 
 import type * as Dockerode from 'dockerode';
-
 import { ExpectedError } from '../errors';
+import * as path from 'path';
+import * as fs from 'fs';
 import { getBalenaSdk, stripIndent } from './lazy';
 import Logger = require('./logger');
 
@@ -25,15 +26,12 @@ export const QEMU_VERSION = 'v7.0.0+balena1';
 export const QEMU_BIN_NAME = 'qemu-execve';
 
 export function qemuPathInContext(context: string) {
-	const path = require('path') as typeof import('path');
 	const binDir = path.join(context, '.balena');
 	const binPath = path.join(binDir, QEMU_BIN_NAME);
 	return path.relative(context, binPath);
 }
 
 export function copyQemu(context: string, arch: string) {
-	const path = require('path') as typeof import('path');
-	const fs = require('fs') as typeof import('fs');
 	// Create a hidden directory in the build context, containing qemu
 	const binDir = path.join(context, '.balena');
 	const binPath = path.join(binDir, QEMU_BIN_NAME);
@@ -68,11 +66,9 @@ export function copyQemu(context: string, arch: string) {
 export const getQemuPath = function (balenaArch: string) {
 	const qemuArch = balenaArchToQemuArch(balenaArch);
 	const balena = getBalenaSdk();
-	const path = require('path') as typeof import('path');
-	const { promises: fs } = require('fs') as typeof import('fs');
 
 	return balena.settings.get('binDirectory').then((binDir) =>
-		fs
+		fs.promises
 			.mkdir(binDir)
 			.catch(function (err) {
 				if (err.code === 'EEXIST') {

package/src/utils/streams.ts

@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import fs = require('fs');
+import * as fs from 'fs';
 
 export function buffer(
 	stream: NodeJS.ReadableStream,

package/src/utils/sudo.ts

@@ -56,7 +56,7 @@ export async function executeWithPrivileges(
 		await spawnAndPipe(command, opts, stderr);
 	} else {
 		opts.shell = true;
-		const escapedCmd = shellEscape(command);
+		const escapedCmd = await shellEscape(command);
 		// running as ordinary user: elevate privileges
 		if (process.platform === 'win32') {
 			await windosuExec(escapedCmd, stderr);

package/src/utils/umount.ts

@@ -40,7 +40,7 @@ export async function umount(device: string): Promise<void> {
 	}
 	const { sanitizePath, whichBin } = await import('./which');
 	// sanitize user's input (regular expression attacks ?)
-	device = sanitizePath(device);
+	device = await sanitizePath(device);
 	const cmd: string[] = [];
 
 	if (process.platform === 'darwin') {

package/src/utils/which.ts

@@ -34,8 +34,8 @@ export async function exists(filename: string, mode = F_OK) {
  * and '.' or '..' with an underscore, plus other rules enforced by the filenamify
  * package. See https://github.com/sindresorhus/filenamify/
  */
-export function sanitizePath(filepath: string) {
-	const filenamify = require('filenamify') as typeof import('filenamify');
+export async function sanitizePath(filepath: string) {
+	const filenamify = await import('filenamify');
 	// normalize also converts forward slash to backslash on Windows
 	return path
 		.normalize(filepath)