Open
Description
Describe the proposed change(s).
rangeStrategy=update-lockfile
means that we have the ability to keep the package file the same, but update the locked version only. Per our docs:
Works for
bundler
,cargo
,composer
,gleam
,npm
,yarn
,pnpm
,terraform
andpoetry
so far
(this list may be incomplete)
The problem is that not all of these managers support exact lock file updating. Some just let you say "update package foo" and it will usually update to the latest version in the allowed range, not necessarily the version users want Renovate to update to. The version to update to is often not the latest in the allowed range because of things like:
- separateMinorPatch
- minimumReleaseAge
For this task:
- Check that the list above is correct
- For each of these, document which support "exact" lockfile updating (e.g. update package foo to v1.2.3 exactly) versus which just say "update package foo to latest"
We then may need to decide how to handle these differences programmatically