cordova-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Gill (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CB-10110) Audit and remove all ">=" dependencies and pins
Date Wed, 02 Dec 2015 01:14:11 GMT

    [ https://issues.apache.org/jira/browse/CB-10110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15035042#comment-15035042
] 

Steve Gill commented on CB-10110:
---------------------------------

I would think we replace it with either `~` which grabs patch versions or `^` which grabs
minor and patch versions. 

For pinned plugins and platforms, we use ~ to only grab updated patch releases.

For plugin dependencies, I switched >= to ^ so we stay away from grabbing major updates.

It would be nice to update our deps to get away from 0.x versions, but the reality is that
some popular modules decided to start at 0 and haven't been bumped up yet. Pinning exact versions
seems like a smart choice.



> Audit and remove all ">=" dependencies and pins
> -----------------------------------------------
>
>                 Key: CB-10110
>                 URL: https://issues.apache.org/jira/browse/CB-10110
>             Project: Apache Cordova
>          Issue Type: Task
>            Reporter: Dmitry Blotsky
>   Original Estimate: 48h
>  Remaining Estimate: 48h
>
> This applies to _all_ components. We should never automatically update to major versions
of dependencies or pins; it should be a deliberate manual process.
> They should be replaced with carets ({{`}}) where the version is greater than 1.0.0,
and with strict equality ({{==}}) where the version is less than 1.0.0.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org


Mime
View raw message