autobahn-js icon indicating copy to clipboard operation
autobahn-js copied to clipboard

fix: put upper limit to dependency module versions

Open venki91 opened this issue 2 years ago • 5 comments

put upper limit to dependency module versions so that a major release don't break autobahn

venki91 avatar Aug 12 '21 11:08 venki91

Can we expect this change to be merged anytime soon ?

yomarion avatar Sep 10 '21 16:09 yomarion

:+1: cbor upgrading to 8.x has broken several of our packages

megawac avatar Sep 27 '21 23:09 megawac

Looks good. I guess it would make sense to do a new release after landing this change

om26er avatar Sep 28 '21 00:09 om26er

couple of thoughts from my side - but @om26er : your advice ^ sounds good! I would love to transfer admin of this repo to the community. if you are interested (also others!), pls gimme a ping and we can discuss. also rgd ownership of the repo: this is also going to change - to a "WAMP Association"

in general, rgd dependencies, we should aim for 2 things:

  1. have no version restrictions for dependencies of this library, so that the library can be used in apps that nail their deps. if we restrict a dependency of autobahn already within autobahn, then an app that also (directly) uses that dependency might disagree (I've run into such issues quite some times .. it is annoying and tricky to work around)
  2. do have version restrictions for dependencies of this library, so that we don't get affected by changes of these.

now, obviously, you can't have both 1 and 2. means, this is a conflicting goal and tradeoffs have to be made.

because of above, I would argue for only adding the absolute minimum version restrictions to our dependencies in the library itself plus a comment that explain/links to the reason for the (upper bound) restriction so that it might be removed later.

oberstet avatar Oct 11 '21 10:10 oberstet

@vnktswrl having no upper limits in dependencies is desired (see above) and not an error. if you run into a specific newer dependency that doesn't work, we can limit the dependency - but only for that single dependency, not all deps.

fwiw, in my eyes the word "major" in "major release" of a dependency is arbitrary ... semantic versioning is an illusion ..

oberstet avatar Oct 11 '21 10:10 oberstet

we have landed that via https://github.com/crossbario/autobahn-js/pull/561

om26er avatar Oct 24 '22 14:10 om26er