Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #1473

Merged
merged 4 commits into from
Jun 20, 2024
Merged

Update dependencies #1473

merged 4 commits into from
Jun 20, 2024

Conversation

mint-thompson
Copy link
Collaborator

Completes task CIMPL-1263.

Dependencies with new minor versions updated via npm update. commander updated to new major version safely. Other dependencies with new major versions are not updated due to the nature of their respective breaking changes (mostly, removal of CommonJS support).

Dependencies with new minor versions updated via npm update.
commander updated to new major version safely. Other dependencies with
new major versions are not updated due to the nature of their respective
breaking changes.
Copy link
Collaborator

@jafeltra jafeltra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I tested this out and things seem to be working well. I have one suggestion and one question:

  • We have a DEPENDENCY-NOTES.md file where we've documented dependencies that we can't updated. It sounds like some from npm outdated would fit in that document. If so, can you add them?
  • This is just a question and it is very possible it isn't necessary at all, but the last time we updated dependencies, we updated the package.json entry for them, even if it was only a minor or patch version update. Is it worth doing that again as well? Or are we planning to just utilize the npm-shrinkwrap.json file for this?

@mint-thompson
Copy link
Collaborator Author

Thank you for the reminder about DEPENDENCY_NOTES.md! I'll make sure that's up-to-date. And I think you're right that it would be a good idea to update package.json as well with the new minor versions, too, so I'll make that change.

Update DEPENDENCY-NOTES.md to reflect that the non-updated dependencies
have been checked recently.
Copy link
Collaborator

@jafeltra jafeltra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for updating package.json!

When I run npm outdated, there's a few packages (I think all ESLint related?) that have major upgrades available. Do we want to hold off on upgrading ESLint for now? I've had success with upgrading to the new major version of ESLint in a different repo, but if there's a reason we don't want to update it here, we probably want to add it to the DEPENDENCY-NOTES.md file.

Other minor updates based on releases in the last few days.
Copy link
Collaborator

@jafeltra jafeltra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks Mint! I'm sorry to ask about something else, but now when I run npm install, I get warnings coming from the @typescript-eslint packages requiring Node to be >= 18.18.0. Do you mind updating the .tool-versions file to use a later 18.x version? I'm fine with either just using 18.18.0, using whatever version you have locally, or using the latest, which is 18.20.3.

This does remind me that I guess we could update to Node 20 at some point, but that could be out of scope for this task.

Copy link
Member

@cmoesel cmoesel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @mint-thompson and @jafeltra. This looks good to me. It installs without a problem and everything runs well. All outdated dependencies are documented.

Copy link
Collaborator

@jafeltra jafeltra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

@mint-thompson mint-thompson merged commit 055f260 into master Jun 20, 2024
14 checks passed
@mint-thompson mint-thompson deleted the cimpl-1263-update-dependencies branch June 20, 2024 16:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants