autocomplete
autocomplete copied to clipboard
deps: update config to pin dep version for new deps additions
This is just a suggestion that when new packages are added to the repo they are pinned to specific version rather than using the caret (^) and allowing to install different minor versions.
My reasons are:
- Dependencies could could mess up semver and introduce breaking changes in minor/patches updates
- Having pinned dependencies makes sure everyone contributing has the same exact versions, making it easier for everyone to debug
- Avoid constantly update
yarn.lockwhen people install deps. Since minor versions are allowedyarn.lockchanges unless contributors install deps with--fozen-lockfileflag (yarn install --frozen-lockfile)
This just changes the behavior for new packages added. package.json would still need to be updated to remove the caret from all deps that have it, but first I wanted to introduce the idea of pinned versions before proceeding to update pacakge.json
@fedeci just a friendly ping in case you missed this 😄
Hey @ddanielcruzz, sorry about the delay on this! I like the idea and am open to merge if you remove the ^ from the deps.