Open benmccann opened 2 months ago
Might need to talk to maintainers beforehand for this one, this is from their CONTRIBUTING.md
:
It should be noted that our team does not accept third-party dependency updates/PRs. We use dependabot to ensure dependencies are staying up-to-date & will ship security patches for CVEs as they occur. If you submit a PR trying to update our dependencies we will close it with or without a reference to these contribution guidelines.
Might need to talk to maintainers beforehand for this one, this is from their CONTRIBUTING.md :
that line feels like it's talking more about "bump dependency to x.y.z" instead of replacing deps
https://github.com/oclif/core/blob/349dba40e5e96c056a663e4b65b4a8fb6103ac9f/package.json#L15