Release: merge release/solid-logic-202603192325 into main#220
Release: merge release/solid-logic-202603192325 into main#220
Conversation
There was a problem hiding this comment.
Pull request overview
Automated stable release merge that adjusts dependency constraints for SolidOS’s solid-logic package and refreshes the npm lockfile accordingly.
Changes:
- Pin
solid-namespaceto0.5.4(was^0.5.4). - Bump
rdflibpeer dependency from^2.3.5to^2.3.6. - Update
package-lock.jsonto reflect the above, including transitive updates (notablyn3to2.0.3).
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| package.json | Pins solid-namespace and raises the minimum rdflib peer version. |
| package-lock.json | Updates lockfile to match dependency/peerDependency changes and new transitive resolutions. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "dependencies": { | ||
| "@inrupt/solid-client-authn-browser": "^3.1.1", | ||
| "solid-namespace": "^0.5.4" | ||
| "solid-namespace": "0.5.4" |
There was a problem hiding this comment.
All other dependencies in this package.json use caret ranges, but solid-namespace is now pinned to an exact version. This will prevent consumers from receiving patch updates (including security fixes) automatically. If there's no specific reason to pin, switch back to a range (e.g., ^0.5.4); if pinning is intentional, consider documenting the rationale (or using an override/resolution if the goal is to constrain a transitive dependency).
| "solid-namespace": "0.5.4" | |
| "solid-namespace": "^0.5.4" |
| }, | ||
| "peerDependencies": { | ||
| "rdflib": "^2.3.5" | ||
| "rdflib": "^2.3.6" |
There was a problem hiding this comment.
Bumping the minimum rdflib peer dependency from ^2.3.5 to ^2.3.6 is a compatibility contract change for downstream consumers who currently use 2.3.5. If 2.3.5 is still compatible, consider widening the range to include it; otherwise, ensure this peer requirement change is reflected in the release versioning/changelog as appropriate.
| "rdflib": "^2.3.6" | |
| "rdflib": "^2.3.5" |
Automated stable release preparation.