search

commitizen / cz-cli

The commitizen command line utility. #BlackLivesMatter
http://commitizen.github.io/cz-cli/
MIT License
16.89k stars 552 forks source link

Allow minor and patch updates to dependencies #965

Closed keeganstreet closed 11 months ago

keeganstreet commented 1 year ago

Currently most of the dependencies in this package are pinned to specific versions. This prevents consuming applications from being able to update these dependencies. This is particularly a problem when security vulnerabilities are found in dependencies, resulting in new versions of commitizen needing to be released i.e:

https://github.com/commitizen/cz-cli/issues/963 https://github.com/commitizen/cz-cli/issues/945 https://github.com/commitizen/cz-cli/issues/931 https://github.com/commitizen/cz-cli/issues/883

By using a ^ before the version number, consuming applications will be able to install minor and patch updates of commitizen's dependencies, which should still be compatible with commitizen according to semver principles.

keeganstreet commented 1 year ago

OK great! I better just fix up the commit message because I didn't actually use conventional commits 😅