Skip to content
This repository has been archived by the owner on Dec 30, 2022. It is now read-only.

Commit

Permalink
chore(lock): update lockfile
Browse files Browse the repository at this point in the history
  • Loading branch information
vvo committed Aug 1, 2017
1 parent f73eb04 commit a80dcd5
Showing 1 changed file with 75 additions and 6 deletions.
81 changes: 75 additions & 6 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -227,6 +227,10 @@ after@0.8.1:
version "0.8.1"
resolved "https://registry.yarnpkg.com/after/-/after-0.8.1.tgz#ab5d4fb883f596816d3515f8f791c0af486dd627"

agentkeepalive@^2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/agentkeepalive/-/agentkeepalive-2.2.0.tgz#c5d1bd4b129008f1163f236f86e5faea2026e2ef"

airbnb-js-shims@^1.1.1:
version "1.2.0"
resolved "https://registry.yarnpkg.com/airbnb-js-shims/-/airbnb-js-shims-1.2.0.tgz#e348ec8fa199b3ebb360ad275b8e0227af255fac"
Expand Down Expand Up @@ -265,6 +269,36 @@ ajv@^5.0.0, ajv@^5.1.5, ajv@^5.2.0:
json-schema-traverse "^0.3.0"
json-stable-stringify "^1.0.1"

algoliasearch-helper@2.19.0:
version "2.19.0"
resolved "https://registry.yarnpkg.com/algoliasearch-helper/-/algoliasearch-helper-2.19.0.tgz#cdc8c623720be8ff2b97216d1e57e02d9642f5a5"
dependencies:
events "^1.1.0"
lodash "^4.13.1"
marked "^0.3.5"
qs "^6.2.1"
util "^0.10.3"

algoliasearch@^3.21.1:
version "3.24.3"
resolved "https://registry.yarnpkg.com/algoliasearch/-/algoliasearch-3.24.3.tgz#0b5da4242baa2e4bf9359bd20c47266ec0e501f4"
dependencies:
agentkeepalive "^2.2.0"
debug "^2.6.8"
envify "^4.0.0"
es6-promise "^4.1.0"
events "^1.1.0"
foreach "^2.0.5"
global "^4.3.2"
inherits "^2.0.1"
isarray "^2.0.1"
load-script "^1.0.0"
object-keys "^1.0.11"
querystring-es3 "^0.2.1"
reduce "^1.0.1"
semver "^5.1.0"
tunnel-agent "^0.6.0"

align-text@^0.1.1, align-text@^0.1.3:
version "0.1.4"
resolved "https://registry.yarnpkg.com/align-text/-/align-text-0.1.4.tgz#0cd90a561093f35d0a99256c22b7069433fad117"
Expand Down Expand Up @@ -3292,6 +3326,13 @@ entities@^1.1.1, entities@~1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/entities/-/entities-1.1.1.tgz#6e5c2d0a5621b5dadaecef80b90edfb5cd7772f0"

envify@^4.0.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/envify/-/envify-4.1.0.tgz#f39ad3db9d6801b4e6b478b61028d3f0b6819f7e"
dependencies:
esprima "^4.0.0"
through "~2.3.4"

errno@^0.1.3, errno@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/errno/-/errno-0.1.4.tgz#b896e23a9e5e8ba33871fc996abd3635fc9a1c7d"
Expand Down Expand Up @@ -3357,6 +3398,10 @@ es6-map@^0.1.3:
es6-symbol "~3.1.1"
event-emitter "~0.3.5"

es6-promise@^4.1.0:
version "4.1.1"
resolved "https://registry.yarnpkg.com/es6-promise/-/es6-promise-4.1.1.tgz#8811e90915d9a0dba36274f0b242dbda78f9c92a"

es6-set@~0.1.5:
version "0.1.5"
resolved "https://registry.yarnpkg.com/es6-set/-/es6-set-0.1.5.tgz#d2b3ec5d4d800ced818db538d28974db0a73ccb1"
Expand Down Expand Up @@ -3607,7 +3652,7 @@ eventemitter3@1.x.x, eventemitter3@^1.1.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/eventemitter3/-/eventemitter3-1.2.0.tgz#1c86991d816ad1e504750e73874224ecf3bec508"

events@^1.0.0, events@^1.1.1:
events@^1.0.0, events@^1.1.0, events@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/events/-/events-1.1.1.tgz#9ebdb7635ad099c70dcc4c2a1f5004288e8bd924"

Expand Down Expand Up @@ -5198,6 +5243,10 @@ isarray@1.0.0, isarray@^1.0.0, isarray@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"

isarray@^2.0.1:
version "2.0.2"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-2.0.2.tgz#5aa99638daf2248b10b9598b763a045688ece3ee"

isexe@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/isexe/-/isexe-2.0.0.tgz#e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
Expand Down Expand Up @@ -5792,6 +5841,10 @@ load-json-file@^2.0.0:
pify "^2.0.0"
strip-bom "^3.0.0"

load-script@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/load-script/-/load-script-1.0.0.tgz#0491939e0bee5643ee494a7e3da3d2bac70c6ca4"

loader-runner@^2.3.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/loader-runner/-/loader-runner-2.3.0.tgz#f482aea82d543e07921700d5a46ef26fdac6b8a2"
Expand Down Expand Up @@ -6025,7 +6078,7 @@ lodash.uniq@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"

"lodash@4.6.1 || ^4.16.1", lodash@4.x.x, lodash@^4.0.0, lodash@^4.0.1, lodash@^4.1.0, lodash@^4.14.0, lodash@^4.17.2, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.2.1, lodash@^4.3.0, lodash@^4.5.1, lodash@^4.6.1, lodash@^4.7.0, lodash@~4.17.4:
"lodash@4.6.1 || ^4.16.1", lodash@4.x.x, lodash@^4.0.0, lodash@^4.0.1, lodash@^4.1.0, lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.2, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.2.1, lodash@^4.3.0, lodash@^4.5.1, lodash@^4.6.1, lodash@^4.7.0, lodash@~4.17.4:
version "4.17.4"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"

Expand Down Expand Up @@ -6148,7 +6201,7 @@ marked-terminal@^1.6.2:
lodash.assign "^4.2.0"
node-emoji "^1.4.1"

marked@^0.3.6, marked@~0.3.6:
marked@^0.3.5, marked@^0.3.6, marked@~0.3.6:
version "0.3.6"
resolved "https://registry.yarnpkg.com/marked/-/marked-0.3.6.tgz#b2c6c618fccece4ef86c4fc6cb8a7cbf5aeda8d7"

Expand Down Expand Up @@ -6839,7 +6892,7 @@ object-get@^2.0.0, object-get@^2.0.2, object-get@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/object-get/-/object-get-2.1.0.tgz#722bbdb60039efa47cad3c6dc2ce51a85c02c5ae"

object-keys@^1.0.10, object-keys@^1.0.8:
object-keys@^1.0.10, object-keys@^1.0.11, object-keys@^1.0.8, object-keys@~1.0.0:
version "1.0.11"
resolved "https://registry.yarnpkg.com/object-keys/-/object-keys-1.0.11.tgz#c54601778ad560f1142ce0e01bcca8b56d13426d"

Expand Down Expand Up @@ -7801,7 +7854,7 @@ qs@6.4.0, qs@~6.4.0:
version "6.4.0"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.4.0.tgz#13e26d28ad6b0ffaa91312cd3bf708ed351e7233"

"qs@>= 0.4.0", qs@^6.4.0, qs@^6.5.0:
"qs@>= 0.4.0", qs@^6.2.1, qs@^6.4.0, qs@^6.5.0:
version "6.5.0"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.5.0.tgz#8d04954d364def3efc55b5a0793e1e2c8b1e6e49"

Expand All @@ -7812,7 +7865,7 @@ query-string@^4.1.0:
object-assign "^4.1.0"
strict-uri-encode "^1.0.0"

querystring-es3@^0.2.0:
querystring-es3@^0.2.0, querystring-es3@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/querystring-es3/-/querystring-es3-0.2.1.tgz#9ec61f79049875707d69414596fd907a4d711e73"

Expand Down Expand Up @@ -7975,6 +8028,16 @@ react-inspector@^2.0.0, react-inspector@^2.1.1:
babel-runtime "^6.23.0"
is-dom "^1.0.9"

react-instantsearch@4.0.9:
version "4.0.9"
resolved "https://registry.yarnpkg.com/react-instantsearch/-/react-instantsearch-4.0.9.tgz#03aef683c3d09818d92092952e54bfbf9051922f"
dependencies:
algoliasearch "^3.21.1"
algoliasearch-helper "2.19.0"
classnames "^2.2.5"
lodash "^4.17.4"
prop-types "^15.5.8"

react-komposer@^1.9.0:
version "1.13.1"
resolved "https://registry.yarnpkg.com/react-komposer/-/react-komposer-1.13.1.tgz#4b8ac4bcc71323bd7413dcab95c831197f50eed0"
Expand Down Expand Up @@ -8289,6 +8352,12 @@ reduce-without@^1.0.0:
dependencies:
test-value "^2.0.0"

reduce@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/reduce/-/reduce-1.0.1.tgz#14fa2e5ff1fc560703a020cbb5fbaab691565804"
dependencies:
object-keys "~1.0.0"

redux@^3.6.0:
version "3.7.2"
resolved "https://registry.yarnpkg.com/redux/-/redux-3.7.2.tgz#06b73123215901d25d065be342eb026bc1c8537b"
Expand Down

10 comments on commit a80dcd5

@vvo
Copy link
Contributor

@vvo vvo commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cc @rarkins strangely when launching yarn locally these changes needed to be made, no idea why

@rarkins
Copy link
Contributor

@rarkins rarkins commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@vvo that is indeed strange. Renovate is using a prebuilt 0.27.5 of yarn which appears to be the latest. I'll take a closer look soon.

@Haroenv
Copy link
Contributor

@Haroenv Haroenv commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We also were using v0.27.5

@vvo
Copy link
Contributor

@vvo vvo commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah maybe it's because we use yarn link in our boot script https://github.com/algolia/react-instantsearch/blob/a80dcd5db3a4c9d595a83c63aa6b190927084b3d/scripts/boot.sh

So:
yarn
yarn link ...
yarn => ends up with those deps

@rarkins
Copy link
Contributor

@rarkins rarkins commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@vvo thanks for that, I'm sure it would have taken me hours to find it.

So the question is, how can we get Renovate following the same thing? Finding - let alone executing -arbitrary .sh scripts seems out of the question.

For now, I'm a little stumped, because
(a) That seems to be an arbitrary shell script that Renovate can't possibly find on its own
(b) Even if it were to find it, I don't think Renovate can ever allow arbitrary shell scripts to run (very hard to sandbox)
(c) It seems you need these packages in the yarn.lock?

I haven't used yarn link or any equivalent in npm myself though so I'm assuming (c) is true.

My first thought is to expose some type of "yarn link" configuration where you can specify directories and parameters - that way it should be "safe" to run. But then you'd also be duplicating your shell script and need to keep them in sync.

BTW here was the last time Renovate updated this yarn.lock: https://github.com/algolia/react-instantsearch/pull/218/files and it seems OK

@vvo
Copy link
Contributor

@vvo vvo commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess we sould just not try to update the yarn.lock file inside our boot script and that should solve it the right way®

@rarkins
Copy link
Contributor

@rarkins rarkins commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

BTW, the way you have this project set up reminds me a little of what the upcoming Yarn Workspaces release is trying to achieve. Check out this draft blog post if you haven't seen it already: https://github.com/yarnpkg/website/blob/e281e8a75c64eb9d918ffbe183435e4e80ffcdc6/_posts/2017-07-26-introducing-workspaces.md

@rarkins
Copy link
Contributor

@rarkins rarkins commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Uh, I just coincidentally noticed you guys power the yarn search infrastructure :)

@Haroenv
Copy link
Contributor

@Haroenv Haroenv commented on a80dcd5 Aug 1, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yep, we have a monorepo situation here, but are waiting a bit, since we had troubles with lerna before. Hopefully yarn workspaces will make our life easier

@rarkins
Copy link
Contributor

@rarkins rarkins commented on a80dcd5 Aug 2, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Haroenv great. Lerna is currently supported by Renovate, Workspaces is not and the issue can be tracked here: renovatebot/renovate#473. Please let me know if/when you're considering implementing if the issue is not yet in progress, I'd be happy to work with you to make sure it's ready/working.

Please sign in to comment.