Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update razzle and react-dev-utils #3997

Merged
merged 4 commits into from
Mar 15, 2023
Merged

Update razzle and react-dev-utils #3997

merged 4 commits into from
Mar 15, 2023

Conversation

davisagli
Copy link
Member

No description provided.

@netlify
Copy link

netlify bot commented Nov 28, 2022

Deploy Preview for volto canceled.

Name Link
🔨 Latest commit 123e723
🔍 Latest deploy log https://app.netlify.com/sites/volto/deploys/6411b28905b40a000852e7c9

@cypress
Copy link

cypress bot commented Nov 28, 2022

Passing run #4397 ↗︎

0 489 20 0 Flakiness 0

Details:

Merge branch 'master' into update-dev-tools
Project: Volto Commit: 123e7234f3
Status: Passed Duration: 14:40 💡
Started: Mar 15, 2023 12:05 PM Ended: Mar 15, 2023 12:20 PM

This comment has been generated by cypress-bot as a result of this project's GitHub integration settings.

@sneridagh
Copy link
Member

sneridagh commented Nov 28, 2022

@davisagli @tiberiuichim this is a breaking change, since we are forced to have the dependency set in all projects, so we have to tell everybody to update. If we do not, the build gets crazy if it has two different Razzle (with their own deps) in there.

We could do it, but maybe it's not worth to push for this minor change now?

@davisagli
Copy link
Member Author

@sneridagh I don't think it will work if we can never make bugfix updates to our dependencies. We need to do that to fix security vulnerabilities.

But the main point here is the update to react-dev-utils (because that unblocks updating some transitive dependencies that are vulnerable). I just updated razzle in passing because I noticed there was a new bugfix release. So I could try taking out the razzle update.

@sneridagh
Copy link
Member

@davisagli yes, I know... this sucks... I just wanted to bring it to the table. Maybe we could find a solution for it... but as long as we have to maintain the direct dependencies in the projects, we will have to deal with this somehow. Even if we make that super easy to manage for the integrators, it would imply an action to be taken, thus the need for mark it as breaking. 😞

@davisagli
Copy link
Member Author

@sneridagh It might not be necessary for projects to specify a razzle version directly now that we removed the razzle dependency from @plone/scripts...would need to experiment more to be sure.

@davisagli
Copy link
Member Author

@sneridagh btw, maybe we should have a test that runs using a project that was generated with volto 16.0.0 rather than the latest generator, so that we can catch if we change something that requires project updates?

@davisagli
Copy link
Member Author

davisagli commented Nov 28, 2022

@sneridagh Anyway, we can still merge it for master and just not backport it to 16.x.x, right? (If I add something to the upgrade guide for volto 17)

@pnicolli
Copy link
Contributor

pnicolli commented Dec 27, 2022

@davisagli yes, I know... this sucks... I just wanted to bring it to the table. Maybe we could find a solution for it... but as long as we have to maintain the direct dependencies in the projects, we will have to deal with this somehow.

@sneridagh iirc, the npm way of doing this is peerDependencies, razzle should be one of them. I would really really love to have an overhaul of the volto dependency system to be more standard, and yarn3 already pushed us somewhat in this direction, but it's quite a biggie and definitely breaking, but also very beneficial in the long run imho.

...in my dreams volto should become just the framework to be used as an installed dependency, not a razzle project itself. 😬 I meant to discuss this point sometimes in the future, but this thread called for a spoiler :)

@davisagli
Copy link
Member Author

@sneridagh We should revisit this one for 17

@sneridagh sneridagh merged commit 6ee7865 into master Mar 15, 2023
@sneridagh sneridagh deleted the update-dev-tools branch March 15, 2023 14:47
erral pushed a commit that referenced this pull request Mar 18, 2023
Co-authored-by: Víctor Fernández de Alba <sneridagh@gmail.com>
sneridagh added a commit that referenced this pull request Apr 3, 2023
sneridagh added a commit that referenced this pull request Apr 3, 2023
sneridagh added a commit that referenced this pull request Apr 5, 2023
* master: (67 commits)
  Add current page parameter to the route in the listing and search block pagination (#4159)
  Fixed wrong localization on password reset page(#4656) (#4657)
  Release notes for 16.19.0 (#4655)
  Razzle upgrade notice in upgrade guide (#4641)
  Release generate-volto 7.0.0-alpha.3
  Update to latest Razzle - needed since #3997. This fixes the duplicated Razzles issue (#4640)
  3092 improve spellcheck (#4633)
  developer process for first time contributing (#4617)
  Trigger CI on pull_request event (#4629)
  Pining of `pydata-sphinx-theme` and `sphinx-book-theme`, CI is complaining. (#4626)
  Set sameSite in `18N_LANGUAGE` cookie (#4627)
  Update simple-git (#4546)
  DefaultView (blocks disabled): Show field name as tip on hover of label (#4598)
  Fix regexp that checks valid URLs and improve tests (#4601)
  Release 17.0.0-alpha.3
  Update changelog relese 16.18.0 (#4596)
  InternalURl helper method should incorporate externalRoutes settings … (#4560)
  Update message Add-on control panel (#4574)
  Fix video warnings link errors (#4578)
  Using Vale in CI for spellcheck (#4423)
  ...
sneridagh added a commit that referenced this pull request Apr 10, 2023
* master: (326 commits)
  Make URL a literal string to fix broken link (#4667)
  Move developer guidelines to contributing #4665 (#4666)
  Update Volto contributing to align with and refer to the new Plone co… (#4634)
  Release @plone/scripts 3.0.0
  Changelog
  Added querystring search get option (#4658)
  Add current page parameter to the route in the listing and search block pagination (#4159)
  Fixed wrong localization on password reset page(#4656) (#4657)
  Release notes for 16.19.0 (#4655)
  Razzle upgrade notice in upgrade guide (#4641)
  Release generate-volto 7.0.0-alpha.3
  Update to latest Razzle - needed since #3997. This fixes the duplicated Razzles issue (#4640)
  3092 improve spellcheck (#4633)
  developer process for first time contributing (#4617)
  Trigger CI on pull_request event (#4629)
  Pining of `pydata-sphinx-theme` and `sphinx-book-theme`, CI is complaining. (#4626)
  Set sameSite in `18N_LANGUAGE` cookie (#4627)
  Update simple-git (#4546)
  DefaultView (blocks disabled): Show field name as tip on hover of label (#4598)
  Fix regexp that checks valid URLs and improve tests (#4601)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants