Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

June '19 update #306

Merged
merged 7 commits into from
Jun 8, 2019
Merged

June '19 update #306

merged 7 commits into from
Jun 8, 2019

Conversation

broofa
Copy link
Member

@broofa broofa commented Mar 7, 2019

Fixes vulnerability warnings.
Keeps README from changing every time it's generated
Remove node v4 from travis (mocha no longer supports v4)

@@ -0,0 +1,2 @@
tag-version-prefix="v"
save-prefix="~"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

would suggest exact versions rather than any floating version - but your call

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. package.json already specifies the exact versions, and is what npm install prefers (I believe).
  2. I actually see exact versions in package.json as an anti-pattern, as it makes it redundant with package-lock.json, while nullifying any value to be had from the npm outdated and npm upgrade commands.

@broofa
Copy link
Member Author

broofa commented Jun 7, 2019

@defunctzombie Updated to address recent github audit warnings. Approve, please.

@broofa broofa changed the title March maint June '19 update Jun 7, 2019
"mocha": "5.2.0",
"runmd": "1.0.1",
"standard-version": "4.4.0"
"@commitlint/cli": "7",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Personally not a fan of this style of dependency tracking (for same reasons as mentioned earlier in this PR).

Copy link
Contributor

@defunctzombie defunctzombie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not a fan of the dependency specifications and think we could probably do away with the README_js generation - seems fine otherwise.

@broofa broofa merged commit 19c22dc into master Jun 8, 2019
@broofa broofa deleted the march_maint branch August 19, 2019 13:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants