dependabot / dependabot/dependabot-core

Deduplicate Yarn Dependencies

Open
#5,830 28 comments 40 reactions 0 assignees View on GitHub
L: javascript:yarn T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

See https://github.com/dependabot/dependabot-core/issues/1297#issuecomment-1246727627 and below for the original discussion of this topic. As proposed in https://github.com/dependabot/dependabot-core/issues/1297#issuecomment-1264519762, one possible compromise would be to dedupe if and only if there are no preexisting duplicates (meaning `yarn dedupe` runs clean prior to bumping).

Contributor guide

Open the contributing guide

Research direction

Start by reading the linked discussion in dependabot-core issue 1297, especially the referenced comments, to understand the proposed deduplication rule. Identify where Yarn dependency updates are assembled, then verify that deduplication runs only when no preexisting duplicates exist and that the resulting update behavior matches the proposal.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.