-
Notifications
You must be signed in to change notification settings - Fork 41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): remove package-lock.json #118
Conversation
Bumps [remark-parse](https://github.com/remarkjs/remark) from 10.0.0 to 10.0.1. - [Release notes](https://github.com/remarkjs/remark/releases) - [Changelog](https://github.com/remarkjs/remark/blob/main/changelog.md) - [Commits](https://github.com/remarkjs/remark/compare/[email protected]) --- updated-dependencies: - dependency-name: remark-parse dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [remark-stringify](https://github.com/remarkjs/remark) from 10.0.1 to 10.0.2. - [Release notes](https://github.com/remarkjs/remark/releases) - [Changelog](https://github.com/remarkjs/remark/blob/main/changelog.md) - [Commits](https://github.com/remarkjs/remark/compare/[email protected]@10.0.2) --- updated-dependencies: - dependency-name: remark-stringify dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [remark](https://github.com/remarkjs/remark) from 14.0.1 to 14.0.2. - [Release notes](https://github.com/remarkjs/remark/releases) - [Changelog](https://github.com/remarkjs/remark/blob/main/changelog.md) - [Commits](remarkjs/remark@14.0.1...14.0.2) --- updated-dependencies: - dependency-name: remark dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Bumps [tap](https://github.com/tapjs/node-tap) from 15.1.1 to 15.1.2. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.1.1...v15.1.2) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
Is there value in keeping a lockfile in this project? It has no effect on consumers who install it and I don't think we clone the repo to run it anywhere? |
abdb958
to
6addbf0
Compare
yeah, good point, the intention was probably to keep the deps stable when publishing, but I don't think package-lock gets published, does it? |
no, it's completely ignored when we publish. |
I usually do this when a package-lock isn't useful: nodejs/node-core-utils@08d3a5f |
yeah, I have that in my global config and usually don't have them in my projects |
6addbf0
to
7a3037e
Compare
changed to |
7a3037e
to
ee4c864
Compare
🎉 This PR is included in version 2.7.4 🎉 The release is available on: Your semantic-release bot 📦🚀 |
### [2.7.4](nodejs/changelog-maker@v2.7.3...v2.7.4) (2021-11-23) ### Trivial Changes * **deps:** remove package-lock.json ([#118](nodejs/changelog-maker#118)) ([a059bc7](nodejs/changelog-maker@a059bc7)) * **no-release:** bump tap from 15.0.10 to 15.1.1 ([#113](nodejs/changelog-maker#113)) ([fcfc5c8](nodejs/changelog-maker@fcfc5c8))
Includes the dependabot updates, but also a general remove and update for package-lock.json with the new format.