Avalon 6.5.0 update: Structure Metadata Editor Javascript package and dependencies updating

[jefferya]

Purpose: capture thoughts on updating the Avalon Structural Metadata Editor (SME in some contexts like git commits), dependencies, and sub-dependancies.

Background: The Structural Metadata Editor is a React UI/UX component to aid in the creation of structural metadata (via visualized audio waveform).

Dependency and Sub-dependancy Updating:

Avalon 6.5.0 is pinned to specific [commit]() of the SME as opposed to using a semver versioning that indicates a breaking change or not. E.g. https://github.com/avalonmediasystem/react-structural-metadata-editor#d3fc34137b883b892ab4e17e340ed92c44f1358d"

First attempt: package.json resolutions

• adding resolutions field to package.json following the selective dependency resolution documentation "https://classic.yarnpkg.com/en/docs/selective-version-resolutions/.
• result adding "peaks.js": "^0.10.1" to the resolutions field in package.json

yarn install --check-files succeeds yarn check succeeds from the cli bundle exec rails c fails with a message I don't understand: isn't ^0.9.13 equivalent to 0.10.1 ? Or > have I endured too much noise and loosing it? The message: yarn check v1.22.4 "error "react-structural-metadata-editor#peaks.js" is wrong version: expected "^0.9.13", got "0.10.1"

• one possible remediation is to disable check_yarn_integrity in config/webpacker.yaml https://github.com/rails/webpacker/tree/v4.2.2#yarn-integrity
• note: yarn check has been historically buggy and undermaintained ... removed in Yarn 2.0... use arn install --check-files instead" https://classic.yarnpkg.com/en/docs/cli/check

Second though: update SME

• try to pull in a newer version of the SME (commit actually)
• risk: need to investigate how the SME connects with Avalon to determine the impact
  • how tied to the Avalon version 6.5 is a particular SME commit/version - upstream documentation/commit messages and no semver means a certain amount of trial and error or guesswork - likely best to ask on the Slack channel to determine how intertwined the two are.

[jefferya]

addressed in #680