In this PR, a direct dependency on ws was updated from 7.2.1 to 7.2.2. The dependency parse should also rely on ws@7.2.1, but that dependency was removed from the lockfile.
parse-community/parse-server#6504
In this PR, a direct dependency on commander was updated from 4.1.1 to 5.0.0. The direct dependency was updated correctly, but two other dependencies had commander@^4.0.1 removed from their dependency lists (@babel/cli and lint-staged both depended on it).
In this second case, there wasn't even an exact match on the type field, but it does look like they had been resolving to the same version.
Examples:
parse-community/parse-server#6478
In this PR, a direct dependency on
wswas updated from 7.2.1 to 7.2.2. The dependencyparseshould also rely onws@7.2.1, but that dependency was removed from the lockfile.parse-community/parse-server#6504
In this PR, a direct dependency on
commanderwas updated from 4.1.1 to 5.0.0. The direct dependency was updated correctly, but two other dependencies hadcommander@^4.0.1removed from their dependency lists (@babel/cliandlint-stagedboth depended on it).In this second case, there wasn't even an exact match on the type field, but it does look like they had been resolving to the same version.