Semver issue ^7.1.0

[mcbain]

Despite linking to @turf/bbox:7.1.0 it uses the 7.2.0 of @turf/helpers due to the ^7.1.0 version.
This is the case for all turf packages. The only workaround is to set the 7.1.0 version for ALL turf packages in resolutions of importing package.json. Turf is build from a single source repo so IMO packages should link with a single fixed version e.g 7.1.0 to prevent a version mixture

[smallsaucepan]

Thanks for the suggestion @mcbain. Can see there would be some upsides. Can you think of any downsides?

Also, do you know of other libraries that do this? It would help to see what they do.

[kade-robertson]

@smallsaucepan I don't have any public links for this, but I use pnpm workspaces quite a bit, and I think all you'd have to do is change workspace:^ to workspace:* to get pinned versions (the docs also make note of this)

[smallsaucepan]

@mfedderly what do you reckon? Can you see any downsides?

[mfedderly]

I think this is probably a reasonable thing to do (change to workspace:*), the downside would be if someone is using @Turf and they for some reason use two different versions of packages that transitively depend on something like @turf/helpers, you'd wind up with two versions of @turf/helpers. So the guidance would be pick a version and use it consistently across all turf packages.

So probably if I was making a PR here I'd change the versions everywhere (maybe with monorepolint or just find/replace across all package.json files), a pnpm install in case that changes the lockfile, and then update the root docs to note that all @turf/* packages should be installed with the same versions across your whole consuming app.

I'm happy to make that change later this week and put up a PR, but it'll probably be Friday if someone wants to get to it before me?

[smallsaucepan]

Currently preparing a housekeeping build tools update PR @mfedderly (typescript, rollup, etc). How about I get that in and then we do this? Avoid too much package.json overlap.

Or do both in the same PR?

[mfedderly]

@smallsaucepan sure I can wait, just ping me for your PR and I'll do the version change after.