Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Relax dependency versions

See original GitHub issue

Subject of the feature

Relax dependency versions.

Problem

See https://github.com/mdx-js/mdx/pull/858#issuecomment-563336666. Essentially, when installing an MDX package such as @mdx-js/mdx, I would rather not have a pinned version of any @babel/* dependencies installed - this causes duplicate versions and can plausibly lead to subtle bugs. If you look at https://unpkg.com/@mdx-js/mdx@1.5.1/package.json, you’ll see @babel/core 7.6.2 gets installed, as well as fixed versions for @babel/plugin-syntax-jsx and @babel/plugin-syntax-object-rest-spread.

Expected behavior

Dependencies should use carets (e.g. ^7.6.2).

Alternatives

Yarn users are able to use things like Yarn resolutions but it’s not ideal to have to resort to resolutions.

/cc @JounQin @johno

Issue Analytics

State:
Created 4 years ago
Reactions:4
Comments:15 (11 by maintainers)

Top GitHub Comments

2reactions

johnocommented, Jul 20, 2020

Dev dependencies are now at the root level. We will also be keeping pinned versions for now in order to avoid subtle bugs and upstream changes.

Thanks all!

2reactions

JounQincommented, Jan 29, 2020

none of these dependencies make it to the client since it’s build tooling

@johno @wooorm As the issue’s thread, this is not correct.

Top Results From Across the Web

relaxed-poetry - PyPI

Faster dependency-versions resolution (more than 4 times faster on tested projects); Multi-package projects support; virtual environments are built inside the ...

Relaxing Dependency Constraints - Packaging and Delivering ...

Relaxing Dependency Constraints ... See Enabling Administrators to Relax Constraints on Installable Package Versions for more information.

Relax Loop-Carried Dependency - Intel

Based on the feedback from the optimization report, you can relax a loop-carried dependency by allowing the compiler to infer a shift register...

Dependency Resolution - The Cargo Book

Cargo uses SemVer for specifying version numbers. This establishes a common convention for what is compatible between different versions of a package. See...

semver - Go Packages

go.bug.st/relaxed-semver build status codecov. A library for handling a superset of semantic versioning in golang.