NPM Bundle needs different versions in Vaadin 24.4.4

[subITCSS]

Describe the bug

We discoverd another problem with the new version:
To create our sbom we check the npm references and getting this error:

npm error code ELSPROBLEMS
npm error invalid: @open-wc/dedupe-mixin@1.4.0 /node_modules/@open-wc/dedupe-mixin

The Issue we discovered is that the vaadin-bundles requires the fixed version of 1.3.1 for it

while all components require the ^1.3.0 and as there is an 1.4.0 the system updates the dependency to 1.4.0 which clashes with the upper fixed definition.

So based on this the Versions should be both fix or flexible using the ^.

Expected-behavior

Both versions are defined identical

Reproduction

Check the npm dependencies.

System Info

Vaadin 24.4.4

[ZheSun88]

Thanks for the ticket.. i have applied the fix to vaadin/bundles.

[subITCSS]

When will this be solved/merged?- This should be available in the 24.4.5 cause it is causing our pipeline to stop

[ZheSun88]

vaadin 24.4.5 has been released a few while ago. Can you test again?

[subITCSS]

So based on what i see - the version did not change/solve this. And based on the situatiuon that your PullRequest is still open - would clearify that.

[ZheSun88]

ah, i see.. sorry for the inconvenience, i will ask the team to merge those PRs and make another release ASAP

[ZheSun88]

Vaadin 24.4.6 has been released with the version fix in bundles