This repository was archived by the owner on Nov 8, 2024. It is now read-only.
chore: loosen ramda dependency range for openapi3-parser #653
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Goal: Widen ramda dependency range to allow use of version
ramda@0.27.2inopenapi3-parser.Adding the carat in
openapi3-parser's dependency configuration is consistent with the use of ramda in theapi-elementspackage in this same monorepo:api-elements.js/packages/api-elements/package.json
Line 25 in 0b3d062
Additionally, allowing downstream consumers to utilize
ramda@0.27.2allows them to use a version which includes this security fix ramda/ramda#3177Bigger picture, as both of the libraries mentioned are included in the dependency tree of
dredd(by way ofdredd-transactions), unifying their use of this dependency will allow deduplication when using that project. The two independent versions of ramda can be seen hereAlternatives
This dependency could be updated to
^0.28.0, which is latest at time of writing, but this change seemed less invasive and alignedapi-elementsandopenapi3-parserto be upgraded in tandem later