Summary

Upgrades chokidar from v3.6.0 to v4.0.3 in both @serverless/engine and @serverless/framework packages.

Breaking Changes Addressed

chokidar v4 removed glob pattern support in the ignored option. The engine package's dev mode watcher has been migrated from glob patterns to a function-based filter:

- ignored: [
-   '**/node_modules/**',
-   '**/.git/**',
-   '**/coverage/**',
-   '**/test/**',
-   '**/*.test.js',
-   '**/*.spec.js',
- ],
+ ignored: (filePath, stats) => {
+   // Function-based filter with same behavior
+ },

The serverless package only uses regex patterns (/\.serverless/) which are still fully supported in v4 - no changes needed.

Changes

• packages/engine/src/lib/devMode/index.js - Migrated glob patterns to function-based ignored filter
• packages/engine/package.json - Updated chokidar to ^4.0.3
• packages/serverless/package.json - Updated chokidar to ^4.0.3
• .github/dependabot.yml - Added chokidar >= 5.0.0 to ignore list (v5 requires Node.js 20)

Testing

• Verified behavior equivalence with 82 test cases covering:
  • Built-in ignored directories (node_modules/, .git/, coverage/, test/)
  • Test file patterns (.test.js, .spec.js)
  • User-configured excludeDirectories
  • Edge cases (e.g., testdata/ not matching /test/)

Notes

• chokidar v5.0.0 requires Node.js 20.19+, which is incompatible with our Node.js 18 support