dependabot / dependabot/dependabot-core
Deduplicate Yarn Dependencies
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Feature description
See https://github.com/dependabot/dependabot-core/issues/1297#issuecomment-1246727627 and below for the original discussion of this topic. As proposed in https://github.com/dependabot/dependabot-core/issues/1297#issuecomment-1264519762, one possible compromise would be to dedupe if and only if there are no preexisting duplicates (meaning `yarn dedupe` runs clean prior to bumping).
Contributor guide
Research direction
Start by reading the linked discussion in dependabot-core issue 1297, especially the referenced comments, to understand the proposed deduplication rule. Identify where Yarn dependency updates are assembled, then verify that deduplication runs only when no preexisting duplicates exist and that the resulting update behavior matches the proposal.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100