Commit 208322b
committed
package.json(fix[resolutions]) Pin ranges to prevent version drift
why: Bugbot review flagged unbounded >= ranges that cross major
versions and risk future drift on yarn install without --frozen-lockfile.
what:
- Replace all >= resolution ranges with ^ caret ranges
- Pin cross-major resolutions to their actual resolved major:
js-yaml ^4.1.1, http-proxy-middleware ^3.0.5, debug ^4.4.3,
diff ^8.0.3, minimatch ^10.1.2, brace-expansion ^4.0.1
- Same-major resolutions stay at minimum patched version:
webpack ^5.104.1, lodash ^4.17.23, qs ^6.14.1, etc.
- No lockfile changes: all resolved versions satisfy new ranges
Verification: yarn install --frozen-lockfile passes, yarn lint passes1 parent 3fc4dbc commit 208322b
1 file changed
Lines changed: 16 additions & 16 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
62 | 62 | | |
63 | 63 | | |
64 | 64 | | |
65 | | - | |
66 | | - | |
67 | | - | |
68 | | - | |
69 | | - | |
70 | | - | |
71 | | - | |
72 | | - | |
73 | | - | |
74 | | - | |
75 | | - | |
76 | | - | |
77 | | - | |
78 | | - | |
79 | | - | |
80 | | - | |
| 65 | + | |
| 66 | + | |
| 67 | + | |
| 68 | + | |
| 69 | + | |
| 70 | + | |
| 71 | + | |
| 72 | + | |
| 73 | + | |
| 74 | + | |
| 75 | + | |
| 76 | + | |
| 77 | + | |
| 78 | + | |
| 79 | + | |
| 80 | + | |
81 | 81 | | |
82 | 82 | | |
83 | 83 | | |
| |||
0 commit comments