Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dingus: add dependency version requirements #159

Merged
merged 2 commits into from
Mar 25, 2019

Conversation

vassudanagunta
Copy link
Contributor

@vassudanagunta vassudanagunta commented Mar 23, 2019

Dingus was rendering incorrectly with Bootstrap 4. Added a bower.json
which requires Bootstrap, jQuery and Lodash with major version equal
to what's currently live. Likewise the minimum patch version.

@vassudanagunta vassudanagunta changed the title bower.json: add dependency version requirements dingus: add dependency version requirements Mar 23, 2019
@jgm
Copy link
Member

jgm commented Mar 23, 2019

Thanks! Can I suggest bumping up the lodash version to the latest?
There's a security advisory here: thom4parisot/crx#89

@vassudanagunta
Copy link
Contributor Author

Done! I updated the requirement to match package.json of commonmark.js.

Are you not concerned with incompatibilities that might be introduced with major version changes, i.e. >=4.17.11 as opposed to ^4.17.11?

@jgm
Copy link
Member

jgm commented Mar 25, 2019

Indeed. Let's change to using ^. I've updated package.json.

@vassudanagunta
Copy link
Contributor Author

done!

Dingus was rendering incorrectly with Bootstrap 4. Added a bower.json
which requires Bootstrap, jQuery and Lodash with major version equal
to what's currently live. Likewise the minimum patch version.
@jgm jgm merged commit a7eb3af into commonmark:master Mar 25, 2019
@jgm
Copy link
Member

jgm commented Mar 25, 2019

Thank you!

@vassudanagunta vassudanagunta deleted the dingus-fix-deps branch March 25, 2019 20:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants