You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: develop-docs/frontend/upgrade-policies.mdx
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,7 +33,7 @@ On the other hand, choosing to constantly keep packages updated to the absolute
33
33
34
34
- Upgrading can in some cases be a non-trivial effort for marginal gains. Validating even small upgrades takes time, often when really nothing has changed. (This is of course a slippery slope, wait too long and packages can become exponentially more work to upgrade)
35
35
36
-
- There is a cost to too much `package.json` churn such as developers having to constantly run `pnpm install` on every git pull.
36
+
- There is a cost to too much `package.json` churn such as developers having to constantly run `yarn install` on every git pull.
37
37
38
38
- A security vulnerability may be introduced in a new version that was not previously present. If we had waited to upgrade until the patch we would not be vulnerable.
39
39
@@ -52,13 +52,13 @@ You may not have to do this manually! See the below section on [Take advantage o
52
52
### Seeing what can be upgraded
53
53
54
54
```bash
55
-
pnpm outdated --color | sort
55
+
yarn outdated --color | sort
56
56
```
57
57
58
58
### Upgrading packages
59
59
60
60
```bash
61
-
pnpm upgrade --latest [package-name] [...]
61
+
yarn upgrade --latest [package-name] [...]
62
62
```
63
63
64
64
<Alert>
@@ -70,7 +70,7 @@ Don't forget to upgrade the `@types/[package-name]` package as well if necessary
70
70
If you would like to upgrade a group of packages (for example `@babel`) you can use
@@ -149,21 +149,21 @@ For example, some dependencies such as `webpack` fall both into the app build **
149
149
150
150
- Does `sentry devserver` still correctly run the client-side application?
151
151
152
-
- Does `pnpm dev-ui` still run the client-only version of the application?
152
+
- Does `yarn dev-ui` still run the client-only version of the application?
153
153
154
154
Depending on what package you're upgrading, you'll what to consider what to test. For example, if you upgraded `fork-ts-checker-webpack-plugin` you'll want to validate that types are still being checked in development.
155
155
156
156
5.**Upgrade the package in getsentry if applicable**
157
157
158
158
Developer tooling and build packages are currently duplicated in `getsentry`'s `package.json`. For those packages, it is important to remember that you will need to upgrade the package in both places.
159
159
160
-
6.**Read the `pnpm-lock.yaml` diff**
160
+
6.**Read the `yarn.lock` diff**
161
161
162
162
It's good to understand exactly what has changed with the upgrade. It's generally a bad thing if upgrading has caused a discrepancy in shared sub dependency versions. For example, if you upgrade `lodash` but another top level package specifies that it needs and older version of `lodash` we will now have **two versions** of `lodash` installed. That means two separate versions of `lodash` will be shipped!
163
163
164
-
Generally you will want to make sure nothing has duplicated versions, in that case you may need to use `[pnpm-dedupe](https://www.npmjs.com/package/pnpm-dedupe)` or in the worst case you may need to upgrade the package which is pulling in the offending older versions.
164
+
Generally you will want to make sure nothing has duplicated versions, in that case you may need to use `[yarn-deduplicate](https://www.npmjs.com/package/yarn-deduplicate)` or in the worst case you may need to upgrade the package which is pulling in the offending older versions.
165
165
166
-
See [The Ultimate Guide to pnpm lockfiles](https://pnpm.io/pnpm-lock.html) for an in-depth look on how these work.
166
+
See [The Ultimate Guide to yarn.lock Lockfiles](https://www.arahansen.com/the-ultimate-guide-to-yarn-lock-lockfiles/) for an in-depth look on how these work.
167
167
168
168
7.**Validate in production after the upgrade is merged**
0 commit comments