googleapis / googleapis/google-cloud-node

Loosen pinned dependency versions to internal google packages

Open
#8,603 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
3.2k
Forks
712
Avg merge
2d 3h
Merged PRs (30d)
99

Description

Our dependency update process update some google packages but that lead to downgrades of some transitive dependencies. Some newer dependency versions seem to depend on pinned older versions of other libraries which lead to downgrades in our repository.

Is this an intentional behavior? I see two possible solutions:
1. Use caret-style versions to allow newer versions.
2. Always update the versions once an update happens in this monorepo so everyone pulls the latest version.

## Examples:

`google-gax` is forced to an older version of `google-auth-library@10.5.0`:
Image

---

`gcp-metadata` is forced to an older version of `gaxios@7.1.3`:
Image

---

`google-auth-library` is forced to an older version of `gcp-metadata@8.1.2`:
Image

---

`google-api-commons` is forced to older versions of `gaxios@7.1.3` and `google-auth-library@10.5.0`:
Image

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.