Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump dependencies 2021.11.1 #414

Merged
merged 5 commits into from
Nov 8, 2021

Conversation

chrislomaxjones
Copy link
Contributor

What does this change?

Cherrypick Dependabot PR and run pnpm up.

This PR also also includes a run of pnpm install web-vitals. This package is marked as a peer dependency in @guardian/libs and not installing web-vitals causes files that import this package to give an error.

This PR also avoids cherrypicking the commit from #410 as it causes an error when used in conjunction with @guardian/eslint-config-typescript. This is mostly likely due to the major version change.

Why?

Keep our dependencies up to date.

dependabot bot and others added 2 commits November 2, 2021 10:17
Bumps [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) from 3.4.2 to 3.4.6.
- [Release notes](https://github.com/amannn/action-semantic-pull-request/releases)
- [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/master/CHANGELOG.md)
- [Commits](amannn/action-semantic-pull-request@v3.4.2...v3.4.6)

---
updated-dependencies:
- dependency-name: amannn/action-semantic-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@chrislomaxjones chrislomaxjones requested a review from a team as a code owner November 2, 2021 10:28
@mxdvl
Copy link
Contributor

mxdvl commented Nov 3, 2021

Do we really need core-vitals as a dependency? I think it should be added as a peer dependency.

@chrislomaxjones
Copy link
Contributor Author

Do we really need core-vitals as a dependency? I think it should be added as a peer dependency.

So each package that imports commercial-core should have core-vitals as a dependency in that case? Is that the behaviour we're after?

@chrislomaxjones chrislomaxjones force-pushed the clj/bump-deps-2021-11-1 branch from 3c37d11 to 5e649e1 Compare November 3, 2021 11:16
@mxdvl
Copy link
Contributor

mxdvl commented Nov 3, 2021

@chrislomaxjones if this is only an issue with Jest, I would actually only include it as a Dev Dependency. You’re right in that we don’t want to force people using commercial-core to have to install core-vitals.

chrislomaxjones and others added 3 commits November 8, 2021 10:08
Install as a development dependency so that we can properly
import @guardian/libs when running jest.
@chrislomaxjones chrislomaxjones force-pushed the clj/bump-deps-2021-11-1 branch from 5e649e1 to 2f6b9c3 Compare November 8, 2021 10:09
@chrislomaxjones chrislomaxjones merged commit bf3e18e into main Nov 8, 2021
@chrislomaxjones chrislomaxjones deleted the clj/bump-deps-2021-11-1 branch November 8, 2021 12:39
@github-actions
Copy link
Contributor

🎉 This PR is included in version 0.26.3 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants