papandreou / seespee

Create a Content-Security-Policy for a website based on the statically detectable relations
BSD 3-Clause "New" or "Revised" License
75 stars 4 forks source link

New version of assetgraph (4.9.1) broke the build #15

Closed depfu[bot] closed 6 years ago

depfu[bot] commented 6 years ago

We've tested your project with an updated dependency and the build failed.

This version is either within the version range you specified or you haven't specified a version/ range. To be able to test your project with the new version, we've taken the liberty of pinning the version for this branch and pull request.

name version specification new version
assetgraph ^4.0.0 4.9.1

Unfortunately, we encountered failing tests after pinning. This means that this new version is not compatible with your project and the test failure potentially will also happen on fresh installs.

If you have correctly specified a semantic versioning version range, you should probably also file an issue with the upstream project as they might have released an update that's breaking SemVer rules, which is not cool. (But then again, not all projects explicitly follow SemVer)

We've left the pull request open for you to investigate this issue. Please don't merge it as is, because, again, we've pinned the version of assetgraph for this test run.

What changed?

✳️ assetgraph ( → 4.9.1) · Repo

Commits

See the full diff on Github. The new version differs by 2 commits:


Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

Depfu Status

coveralls commented 6 years ago

Coverage Status

Coverage remained the same at 83.041% when pulling 4d38170ec5977acc81a0e3e7971d3496c1a55314 on depfu/check/npm/assetgraph-4.9.1 into 3780e496e5c4f77b91e2e92fa6d37d95825e1535 on master.

papandreou commented 6 years ago

Temporary glitch, it seems. I'm happy with keeping it at ^4.0.0, so closing this.