Questions tagged [semantic-versioning]
Semantic Versioning is a community-driven version-numbering standard. Use this tag to indicate the software versioning concepts defined at http://semver.org.
662
questions
0
votes
0
answers
16
views
How to support semver in pattern and format config?
When following semver when versioning my project I create tags that match this regex:
semver.org#regex
This pattern is not supported because we need to use predefined capture group names.
I have ...
0
votes
0
answers
27
views
How to use azure devops pipeline counter in bash?
I want to use a counter to have unique build numbers in case my version string has not changed.
This is my config:
- task: Bash@3
name: GetSemVer
displayName: Get semantic version
inputs:...
1
vote
0
answers
107
views
postgres error: mergejoin input data is out of order
I have two tables in my postgres database, relations and versioninfo:
postgres=# \d+ relations
Table "public.relations"
...
0
votes
0
answers
29
views
Versioning Jsons with JSON Schema
I'm starting to write a JSON Schema for a category of parts that our industry uses. I have tried to look into how best to version JSON files for the future based on the schema but I couldn't find ...
0
votes
1
answer
97
views
Lerna problem using conventional commits with an existing project
I've been manually managing my package versions and changelog.md file up to the 5.2.0. Now I'm trying to integrate Lerna to manage my package but facing an issue while doing that.
Issue: lerna version ...
0
votes
1
answer
45
views
Error while changing data type of a column using alter column in postgresql
I have a table where columns are like this:
system_name varchar(255),
from_package_name varchar(255),
from_version varchar(255)
The from_version column is of varying characters type right now which ...
0
votes
0
answers
49
views
Updating dependencies of my nuget package is a breaking change
When I create some nuget (N1) that uses other nugets (N2), I reference it with floating version (e.g. 3.). I do this so that whoever uses my nuget (N1) will get the latest minor of the dependencies (...
0
votes
0
answers
81
views
Semantic versioning in Gitlab CI pipeline
How to implement semantic versioning in Gitlab CI pipeline.I tried to few ways but it didn’t work. I tried writing githooks and versioning is generating as expected but I am not able to update the tag ...
0
votes
0
answers
13
views
Nuget failing to normalize for one of third party package
I don't have dev-ops experience as of yet.
I am trying to fix the CI part of CI/CD process on Azure.
Also we are using the Nuget latest version
currently the build for the project is failing because ...
0
votes
0
answers
15
views
Nuget failing to normalize for one of third party package
I don't have dev-ops experience as of yet.
I am trying to fix the CI part of CI/CD process on Azure.
Also we are using the Nuget latest version
currently the build for the project is failing because ...
0
votes
0
answers
37
views
Multi-module application and versioning strategy
I have a Spring boot application with several modules (I'm using Maven) and each module includes several other modules/libs (eg. for MongoDB, MySQL, ActiveDirectory etc.) and some of them are in ...
0
votes
0
answers
156
views
How to fix vulnerabilities in semver and expo@44.0.6 in npm audit report?
I'm facing security vulnerabilities in my npm audit report, specifically related to semver (versions 7.0.0 - 7.5.1) and expo@44.0.6, both rated as moderate severity.
Here are the details from the npm ...
0
votes
0
answers
39
views
semantic-release detected a breaking change commit in a merge from master, causing a new major alpha version
I think maybe we are using semantic release wrong at my company, but no one really knows the right way to use it. We have an alpha branch that creates releases with alpha tags at the end of the ...
0
votes
0
answers
173
views
npm installing package thats not mentioned in package.json during Jenkins build
this is my first post, please let me know if I've missed adding any details or explanations for my question.
I'm trying to perform basic npm install and am receiving the following error.
npm ERR! code ...
1
vote
1
answer
38
views
SemVer: what if I need to support several customer-specific versions?
Given I have a product which follows SemVer versioning approach.
Given I have several customers which receive builds of my product.
Given 2 customers at once are asking me to make a hotfix to their ...
0
votes
0
answers
119
views
Trivy unable to take into account the semver version override in package.json
Trivy scanner is unable to take the updated version(7.5.2) and still throws error in the build(showing installed version as 7.5.1).
(alpine 3.17.4)
Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, ...
0
votes
1
answer
24
views
What does "exp" respresent in "exp.sha.5114f85" of Sematic Versioning examples?
I'm reviewing the semver specification on build metadata and noticed "exp.sha.5114f85" in the examples of valid versions:
Examples: 1.0.0-alpha+001, 1.0.0+20130313144700,
1.0.0-beta+exp.sha....
1
vote
1
answer
332
views
SemVer vulnerabilities issue with Vite+React JS
I've created a new project to work on with vite & react JS.
Running the command npm create vite@latest works fine, and them I have to run npm install
this doesn't quite end well, because it says ...
1
vote
1
answer
1k
views
Semver , 7 moderate severity vulnerabilities
I have a problem with a ViteJS project, I have 7 moderate vulnerabilities with Semver:
# npm audit report
semver <7.5.2
Severity: moderate
semver vulnerable to Regular Expression Denial of ...
-1
votes
1
answer
330
views
When I create a new project by using npm create vite@latest and do npm install, I get the following error
semver <7.5.2
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
fix available via npm audit fix --force
Will install ...
4
votes
2
answers
2k
views
I cant Fix NPM vulnerabilities
I don't know much about npm and I need to fix this problem:
# npm audit report
semver <7.5.2
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - https://github.com/...
2
votes
2
answers
140
views
Managing monorepo versioning using modified version of semver in a python project
Consider you have a monorepo in github, whereas each folder represents a microservice.
Now I want to be able to have a git tag for each microservice separately.
Since we are sharing one repo, each tag ...
0
votes
0
answers
128
views
package.json vs package-lock.json vs semantic versioning
Here is my understanding:
The package.json defines which dependencies and which versions are used. Depending on whether there is a ^ or a ~ before the version number, the exact versions can vary ...
0
votes
3
answers
91
views
Add pre-release version format to Go versioning validator script
I am trying to modify an already existing code for a simple versioning check script that has been written in Go. The script is for checking if a version tag update is in line with the expectations and ...
0
votes
1
answer
53
views
How should SemVer convention apply to a project fork with an additional commit?
I'm looking to fork a project and merge one commit that is currently still open but that would be incredibly beneficial for my means. The commit serves to fix a previous build system bug.
I'm unsure ...
0
votes
1
answer
422
views
fetch-depth: 0 on github actions checkout is not fetching all tags and refs
I have a repo which has a TAG 1.0.0 on main and i am running a github workflow on branch "dev"
steps:
- name: "Checkout Application repo"
uses: actions/...
1
vote
1
answer
154
views
When should you update release notes/changelogs?
Looking to automate our changelogs and release notes with conventional commits and Azure DevOps pipelines, and the process seems "simple" based on all of the documentation and videos I've ...
0
votes
0
answers
23
views
pip pulling incorrect version?
In my private pypi I have two packages that I published:
1.0.4+snapshot.2023.5.25.7.16.0 and 1.0.4.
In requirements.txt I specify package_name==1.0.4, but 1.0.4+snapshot.2023.5.25.7.16.0 is pulled ...
0
votes
1
answer
249
views
No matching version found for my-other-package@0.0.0-0
I'm working with a lerna project that uses npm and uncertain whether this is a lerna or npm issue.
The structure of the project is like this
- package.json (root)
- package-lock.json
- lerna.json
- ...
4
votes
1
answer
582
views
PNPM installation does not update minor or patch versions even with caret (^)
PNPM seems to install exactly the version specified in package.json and doesn't seem that to install the latest minor version.
For example, In my package.json i have this dependency
"@tanstack/...
0
votes
0
answers
44
views
Stop peer dependencies using minor version (^) from updating in project
I have a project in which the client's policy in the CI pipelines ignore package-lock.json file and always install everything from scratch.
The issue with this is that sometimes, everything works ...
0
votes
1
answer
69
views
Nuget versioning when removing a dependency from package
Let's say I have a PackageA which has a package reference of TransitiveDep.
// PackageA's nuget refs
<PackageReference Include="TransitiveDep" Version="1.2.3" />
I have an ...
0
votes
0
answers
38
views
I need a Git or GitHub method of defining a version macro [duplicate]
In my simple command line utilities written in C, I would place macro to hold the RCS version number of the primary C module. I'd then output this version number with the copyright slug. RCS would ...
0
votes
1
answer
168
views
What does "version lock" exactly mean?
I just read the main article about Semantic versioning 2.0.
"Version lock" is part of the "dependency hell" issue and explained like this:
In systems with many dependencies, ...
0
votes
1
answer
37
views
Do I need assembly versions at all if I never work with the GAC?
I never used assembly versions in my .NET Core/5/6 projects until today.
I understand that it can make sense to have different assembly versions loaded into the GAC from time to time, but in my own ...
0
votes
0
answers
184
views
How to update/sync composer.json with entries from composer.lock
I have following in my composer.json
{
"require": {
"vendor/package": "^2.0.0", // but installed 2.1.1 because of the ^
}
}
how do I update/sync the composer....
2
votes
0
answers
84
views
Is there a better regex to truncate semantic version to major version?
Tried a few regex expressions but uncertain about correctness. As they say now I have two problems so here comes my question.
Problem to solve is using a major version in a Dockerfile. Tools in use - ...
1
vote
1
answer
53
views
Labelling error during version comparison
I have a dataframe that looks like this:
api_spec_id commit_date info_version label
500 2020-07-22 1.1
500 2020-11-09 1.1
500 ...
2
votes
1
answer
607
views
semantic-release doesn't bump package.json version
I have configured semantic-release in package.json like that:
"release": {
"branches": [
"master"
],
"plugins": [
["@semantic-...
0
votes
0
answers
111
views
Gitversion: How to increment Minor version when there i Pull request from feature -> Dev or Dev -> Main
I am not following git flow , but i want to use git version to increment the Minor version when there is a
Pull request from Feature/bugfix branch to Dev
Pull request from Dev/bugfix to Main
Below is ...
0
votes
1
answer
493
views
Kaniko Docker build with semantic versioning from GitLab ci
I am building a Docker image using Kaniko executor, and pushing the built image to a private artifactory. I would like to use semantic versioning to be able to distinguish between later releases/...
0
votes
1
answer
165
views
What does it mean ""* and "x"/"X" in helm version?
I've read that wondeful topic but there are no answer for some questions:
1. What is the difference beetween:
a) ^0 and ^0.*.0
b) ^0.0 and ^0.*.0
c) ^0.0.0 and ^0.*.0
d) ^0 and ^0.*
...
2. ...
3
votes
0
answers
93
views
Unable to resolve dependency tree but caret requirement should actually be met
I have a problem with updating npm packages that indicates my lack of understanding peerDependencies and / or the ^ caret version range.
State until now:
My project my-app has a dependency to a ...
1
vote
1
answer
382
views
Semantic Version comparison and labelling without packages
I have a dataframe that looks like this:
api_spec_id label info_version commitDate
803 2.3.0 2019-09-12
803 2.4.1 2019-10-04
803 ...
1
vote
0
answers
102
views
What is the difference between `npm version prerelease` and `npm version prepatch`?
I don't see any difference.
npm version:
prepatch: 1.5.3 > 1.5.4-rc.0
preminor: 1.5.3 > 1.6.0-rc.0
premajor: 1.5.3 > 2.0.0-rc.0
prerelease: 1.5.3 > 1.5.4-rc.0
i.e. prepatch and ...
0
votes
0
answers
109
views
Which is better and which should we prefer to use, tilde(~) or caret (^) in package.JSON?
I am working on Automation testing project
Unable to figure out what should be prefer to use between tilde(~) and caret(^) in dependencies and devDependencies
Framework we are using - Chai-mocha(...
0
votes
0
answers
76
views
What does last part of Android NDK version mean?
When I get to download Android NDK, I can see version name like below.
android {
ndkVersion "25.2.9519653"
}
This looks like semantic versioning to me.
But patch version seem to be too ...
0
votes
1
answer
197
views
What is the recommended way to add plugin version in pubspec.yaml?
Using caret (^) sign -
plugin_name : ^10.0.0
Without using caret (^) sign -
plugin_name : 10.0.0
As The ^ sign is used to automatically use the most up-to-date package from Pub as long as that ...
2
votes
2
answers
1k
views
Flutter and Automatic Versioning
I was wondering whether is it possible to have automatic versioning (following the SemVer convention) in Flutter, set in a GitLab/GitHub/BitBucket pipeline.
Obviously, all git commits will follow the ...
0
votes
0
answers
225
views
Git Semantic Versioning in Azure Yaml Pipeline
I want to update build number with git semantic versioning like Major.Minor.Patch
Major version is hard coded ex., 1.0.0
For “main” branch it should increase minor version
Version: Major.Minor.Patch i....