Greenkeeper: Always up-to-date npm dependencies

Post by avitzurel » Fri, Sep 25, 2015, 9:03 PM UTC

janl wrote: post #11

avitzurel wrote: post #8

Here's my 2 cents coming from experience with Rubygems (and my minimal experience with Node). You simply cannot auto upgrade dependencies. Period. On an application running in production with development spanning over a couple of months this will break a lot of stuff. For that to happen, all package developers have to follow semantic versioning and make sure they never break API with minor updates, but that's hard to…

Heya, you summed up the problem perfectly and we are not trying to be all clever solving this unsolvable riddle. All Greenkeeper does is send you a Pull Request, which then runs your test. Only when you as the maintainer are satisfied this works, you get to merge the PR. We have another project https://github.com/semantic-release/semantic-release that you can use to make sure your project leaves semver to computers a…