From 3b8116ec5c89db9d90c26707b2d85639fa4e58e3 Mon Sep 17 00:00:00 2001 From: spwoodcock Date: Tue, 5 Dec 2023 07:19:41 +0000 Subject: [PATCH] fix: clarify dependency locking with minimum version --- docs/dev-guide/dep-management.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/dev-guide/dep-management.md b/docs/dev-guide/dep-management.md index 782fb7f..6ab5860 100644 --- a/docs/dev-guide/dep-management.md +++ b/docs/dev-guide/dep-management.md @@ -119,6 +119,11 @@ The packages should **never** have pinned dependencies to a specific version. **It is recommended that versions should be pinned in an open ended way, using greater than or equal too (>=)**. +> For this to work, a minimum required version of a dependency should +> be established. There is little point pinning >= if a very up to +> date version of a dependency is used (forcing the installer to update +> to a very recent version). + This ensures that a minimum version of the dependency is used, but does not prevent dependency upgrades for those using the package.