Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enforce min version of w3c-keyname to be 1.1.8 #1

Closed
wants to merge 1 commit into from

Conversation

d4rkr00t
Copy link
Contributor

Version below 1.1.8 has an issue when shortcuts with the Shift key (e.g. CMD+Shift+Z) is not working properly in Chrome (maybe other browsers too).

It's happening because w3c-keyname returns z (as a lowercase z) instead of Z (uppercase Z) which is breaking those shortcuts.

Even though version 1.1.8 satisfies specified semver range of '^1.1.0' tooling like yarn is not updating existing yarn locks... Solution could be to manually amend yarn.lock/package-lock.json, but I think it makes total sense to just force it in a package...

Version below 1.1.8 has an issue when shortcuts with the Shift key (e.g. CMD+Shift+Z) is not working properly in Chrome (maybe other browsers too). 

It's happening because w3c-keyname returns z (as a lowercase z) instead of Z (uppercase Z) which is breaking those shortcuts. 

Even though version 1.1.8 satisfies specified semver range of '^1.1.0' tooling like yarn is not updating existing yarn locks... Solution could be to manually amend yarn.lock/package-lock.json, but I think it makes total sense to just force it in a package...
@marijnh
Copy link
Member

marijnh commented Feb 23, 2018

Solution could be to manually amend yarn.lock/package-lock.json,

I haven't really worked with yarn a lot, but is that really the main way to do this? Isn't yarn upgrade an easier way?

I am not really happy about the idea of tracking the current versions of dependencies in all modules—that'd add a lot of busywork.

@d4rkr00t
Copy link
Contributor Author

d4rkr00t commented Feb 23, 2018

Yeah, it seems like the only way, because for the project that has this issue it's a huge chain of dependencies e.g.: project -> editor (our editor built on top of prosemirror) -> prosemirror-keymap -> w3c-keyname. In this case w3c-keyname is a transitive dependency somewhere deep down dependency tree. They can update/upgrade our abstraction (editor), but because old version of w3c-keyname still satisfies semver range in prosemirror-keymap yarn is not touching it...

@marijnh
Copy link
Member

marijnh commented Feb 23, 2018

but because old version of w3c-keyname still satisfies semver range in prosemirror-keymap yarn is not touching it...

Well that's just terrible. What happens when you yarn upgrade w3c-keyname?

@marijnh
Copy link
Member

marijnh commented Feb 23, 2018

There's some discussion about this at yarnpkg/rfcs#54 , but it doesn't seem to be moving very quickly.

@d4rkr00t
Copy link
Contributor Author

d4rkr00t commented Feb 23, 2018

Well that's just terrible. What happens when you yarn upgrade w3c-keyname?

Nothing...

marijnh pushed a commit that referenced this pull request Feb 23, 2018
Version below 1.1.8 has an issue when shortcuts with the Shift key
(e.g. CMD+Shift+Z) is not working properly in Chrome (maybe other
browsers too).

It's happening because w3c-keyname returns z (as a lowercase z)
instead of Z (uppercase Z) which is breaking those shortcuts.

Even though version 1.1.8 satisfies specified semver range of '^1.1.0'
tooling like yarn is not updating existing yarn locks... Solution
could be to manually amend yarn.lock/package-lock.json, but I think it
makes total sense to just force it in a package...

FIX: Upgrade `w3c-keyname` dependency to version 1.1.8 to prevent
users getting stuck with a buggy version.

Issue #1
@marijnh
Copy link
Member

marijnh commented Feb 23, 2018

Not too happy about the prospect of having to track transitive dependencies with new releases, but I've merged this and released it as 1.0.1, since apparently the package managers won't help here.

@marijnh marijnh closed this Feb 23, 2018
@d4rkr00t d4rkr00t deleted the patch-1 branch February 24, 2018 08:57
@d4rkr00t
Copy link
Contributor Author

Thank you. I'm not happy having to ask you to do that either :( But it seems like the only reliable way to enforce that right now :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants