DeprecationWarning for punycode module

[tleonhardt]

What happened?

Upon running the gemini CLI, the following warning appears in red text:

(node:99526) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.
(Use `node --trace-deprecation ...` to show where the warning was created)

To reproduce:

gemini --version

What did you expect to happen?

At least for the current stable release of gemini, I do not expect to see any warnings upon launch.

Client information

Client Information

Run gemini to enter the interactive CLI, then run the /about command.

> /about
│ About Gemini CLI                                                                  │
│                                                                                   │
│ CLI Version                 0.4.1                                                 │
│ Git Commit                  70ff7a36                                              │
│ Model                       gemini-2.5-pro                                        │
│ Sandbox                     no sandbox                                            │
│ OS                          darwin                                                │
│ Auth Method                 OAuth

Login information

Google Account

Anything else we need to know?

• Gemini CLI version: 0.4.1
• OS: macOS Sequoia 15.7
• Architecture: Apple M3 Max (ARM64)
• npm version: 11.6.0
• node version: 22.9.0

[gemini-cli]

The user is reporting a DeprecationWarning when running the CLI. This is an unexpected output, making it a 'kind/bug'. The issue is caused by the punycode module being deprecated in the user's version of Node.js, which falls under 'area/platform' (OS/runtime compatibility) and is directly related to 'dependencies'.

[lifefloating]

The punycode deprecation warning appears starting from Node.js 21.0.0.

Timeline:

• Node.js 7.0.0 - Only documented as deprecated, no runtime warning
• Node.js 21.0.0 - Started showing runtime deprecation warnings
• Node.js 22.x - Continues to show warnings

The warnings mainly come from indirect dependencies of third-party packages:

• jsdom → whatwg-url → tr46 → punycode
• eslint → ajv → uri-js → punycode
• msw → tough-cookie → punycode
• @google-cloud/storage -> gaxios@6.7.1 -> node-fetch@2.7.0 -> punycode

[lifefloating]

maybe we should consider update these

[lifefloating]

/assign

[gemini-cli]

👋 @lifefloating! You currently have 3 issues assigned to you. We have a 3 max issues assigned at once policy. Once you close out an existing issue it will open up space to take another. You can also unassign yourself from an existing issue but please work on a hand-off if someone is expecting work on that issue.

[lifefloating]

@google-cloud/storage@7.17.1
├── gaxios@6.7.1
│ └── node-fetch@2.7.0
│ ├── whatwg-url@5.0.0
│ │ └── tr46@2.1.0
│ │ └── punycode@2.1.1

this is outdate for this

other issues can be resolved by upgrading, but this one — @google-cloud/storage — is still not working even after upgrading to the latest version, because it has a dependency issue with the latest version of gaxios.
@tleonhardt

[tleonhardt]

gaxios 7.x does not have a dependency on punycode anymore.

google-cloud/storage latest version is pinned to gaxios 6.x

I opened an issue with google-cloud/storage about this: googleapis/nodejs-storage#2649, but their bot auto-closed it. Oh the customer obsession ;-)