Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not lock dependencies to minor version #279

Merged
merged 3 commits into from
Jul 20, 2021
Merged

Do not lock dependencies to minor version #279

merged 3 commits into from
Jul 20, 2021

Conversation

joshbuker
Copy link
Contributor

Overly restrictive version locks will cause unnecessary issues for downstream applications. All gems should be following semver, such that minor version bumps are completely backwards compatible. By fuzzy locking to the minor version that you need, you both allow upgrading to compatible newer versions, while also ensuring the inclusion of functionality that may have been introduced in a minor version.

Overly restrictive version locks will cause unnecessary issues for downstream applications. All gems should be following semver, such that minor version bumps are completely backwards compatible. Fuzzy locking to a specific minor version will also allow you to use new functionality if it was added in a backwards compatible minor version update.
@joshbuker joshbuker requested a review from a team as a code owner July 13, 2021 22:04
@joshbuker
Copy link
Contributor Author

It appears I can't see why CircleCI is failing without creating an account. Github actions avoids this issue, and provides pretty in-depth CI/CD integrations.

@davidpatrick
Copy link
Contributor

Hey @athix thanks for raising the PR. The tests are failing locally as well. It looks to be an issue with rest client 2.1.0

@joshbuker
Copy link
Contributor Author

Hey @athix thanks for raising the PR. The tests are failing locally as well. It looks to be an issue with rest client 2.1.0

🤦‍♂️ It's frustrating that rest-client isn't following semver... Also I took a look and it seems like the library might be unmaintained at the moment, which is a bit concerning. I created an issue to ask about this: rest-client/rest-client#764

Thanks for tracking down what the problem was! 🙂

@davidpatrick davidpatrick added this to the vnext milestone Jul 20, 2021
@davidpatrick davidpatrick merged commit 6cf30cc into auth0:master Jul 20, 2021
@davidpatrick davidpatrick mentioned this pull request Jul 20, 2021
@joshbuker joshbuker deleted the patch-1 branch July 20, 2021 20:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants