Skip to content

Conversation

sameerank
Copy link
Contributor

@sameerank sameerank commented Aug 8, 2025

🎟️ Fixes issue
πŸ“œ Design Doc: link if applicable

Motivation and Context

To incorporate the changes from Eppo-exp/js-sdk-common#292

Description

How has this been documented?

How has this been tested?

},
"homepage": "https://github.com/Eppo-exp/node-server-sdk#readme",
"dependencies": {
"@eppo/js-client-sdk-common": "^4.15.1"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm recalling that we had decided in the past to avoid using loose semver notations (~ and ^) because we run the risk that if we release a change in common that is incompatible with one of the SDKs, that it might automatically get picked up and cause issues?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes good catch this is safer

Comment on lines 62 to 64
"resolutions": {
"minimatch": "^3.1.2"
}
Copy link
Contributor Author

@sameerank sameerank Aug 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was running into this error:

Run yarn --frozen-lockfile
yarn install v1.22.22
[1/5] Validating package.json...
[2/5] Resolving packages...
[3/5] Fetching packages...
error [email protected]: The engine "node" is incompatible with this module. Expected version "20 || >=22". Got "18.20.8"
error Found incompatible module.
info Visit https://yarnpkg.com/en/docs/cli/install for documentation about this command.

I.e. dependencies were resolving to a version of minimatch that is not compatible with node 18. I believe this will maintain compatibility with the old node version

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Interesting. Thanks for addressing

@sameerank sameerank requested review from typotter and aarsilv August 8, 2025 16:18
},
"homepage": "https://github.com/Eppo-exp/node-server-sdk#readme",
"dependencies": {
"@eppo/js-client-sdk-common": "^4.15.1"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes good catch this is safer

Comment on lines 62 to 64
"resolutions": {
"minimatch": "^3.1.2"
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Interesting. Thanks for addressing

version "2.2.1"
resolved "https://registry.yarnpkg.com/@ampproject/remapping/-/remapping-2.2.1.tgz#99e8e11851128b8702cd57c33684f1d0f260b630"
integrity sha512-lFMjJTrFL3j7L9yBxwYfCq2k6qqwHyzuUl/XBnif78PWTJYyL/dfowQHWE3sp6U6ZzqWiiIZnpTMO96zhkjwtg==
version "2.3.0"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lots of yarn changes were these dependabot upgrades or from running yarn with a different node version?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Still lots of yarn.lock changes, even though my local environment is the following:

% node --version      
v18.20.8
% yarn --version
1.22.22

There have been a lot of changes to the underlying dependencies though. The latest common release includes quite a few deps-dev version bumps

https://github.com/Eppo-exp/js-sdk-common/releases/tag/v4.15.2

My hunch is that some of these bumps probably resolve to versions of minimatch and @types/node that are incompatible with node 18, hence the need to add the resolutions fields to the package.json to get yarn install to still work

| Package | Description |
| --- | --- |
| [@eppo/node-server-sdk](./node-server-sdk.md) | |
<table><thead><tr><th>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Big regeneration of docs guessing the auto doc package updated?

Copy link
Contributor Author

@sameerank sameerank Aug 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You can see that it jumped a few patch versions

node-server-sdk/yarn.lock

Lines 628 to 667 in b96a888

"@microsoft/api-documenter@^7.23.9":
version "7.26.31"
resolved "https://registry.yarnpkg.com/@microsoft/api-documenter/-/api-documenter-7.26.31.tgz#7307fee2f4ebd348c45df4de32a2182031528a44"
integrity sha512-eGp0nf/wTnuFTNf2WI998i0sjZNbFY2AiIC3BAy8BJOu3jYCYB8+zd/uE004eF4JE6bLNXAUqBXYcu5BD2aWCA==
dependencies:
"@microsoft/api-extractor-model" "7.30.7"
"@microsoft/tsdoc" "~0.15.1"
"@rushstack/node-core-library" "5.14.0"
"@rushstack/terminal" "0.15.4"
"@rushstack/ts-command-line" "5.0.2"
js-yaml "~3.13.1"
resolve "~1.22.1"
"@microsoft/[email protected]":
version "7.30.7"
resolved "https://registry.yarnpkg.com/@microsoft/api-extractor-model/-/api-extractor-model-7.30.7.tgz#a87cd3332cd1016e47a6f4a1c4585024aa92bc7d"
integrity sha512-TBbmSI2/BHpfR9YhQA7nH0nqVmGgJ0xH0Ex4D99/qBDAUpnhA2oikGmdXanbw9AWWY/ExBYIpkmY8dBHdla3YQ==
dependencies:
"@microsoft/tsdoc" "~0.15.1"
"@microsoft/tsdoc-config" "~0.17.1"
"@rushstack/node-core-library" "5.14.0"
"@microsoft/api-extractor@^7.38.0":
version "7.52.10"
resolved "https://registry.yarnpkg.com/@microsoft/api-extractor/-/api-extractor-7.52.10.tgz#bbae187c209b537a39f08592577fa1dd50b22e15"
integrity sha512-LhKytJM5ZJkbHQVfW/3o747rZUNs/MGg6j/wt/9qwwqEOfvUDTYXXxIBuMgrRXhJ528p41iyz4zjBVHZU74Odg==
dependencies:
"@microsoft/api-extractor-model" "7.30.7"
"@microsoft/tsdoc" "~0.15.1"
"@microsoft/tsdoc-config" "~0.17.1"
"@rushstack/node-core-library" "5.14.0"
"@rushstack/rig-package" "0.5.3"
"@rushstack/terminal" "0.15.4"
"@rushstack/ts-command-line" "5.0.2"
lodash "~4.17.15"
minimatch "10.0.3"
resolve "~1.22.1"
semver "~7.5.4"
source-map "~0.6.1"
typescript "5.8.2"

And the dependencies (like typescript and minimatch) eventually trace their way back to the dependabot bumped versions in the latest common release https://github.com/Eppo-exp/js-sdk-common/releases/tag/v4.15.2

@sameerank sameerank requested a review from aarsilv August 8, 2025 18:08
@sameerank sameerank merged commit d5c9a91 into main Aug 8, 2025
8 checks passed
@sameerank sameerank deleted the sameeran/use-latest-common branch August 8, 2025 20:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants