We don't update the deps every release. It is more just a reminder to check them, make sure bundled deps match wanted. If releaser is feeling ambitious, they can update the deps. Might require more in depth testing. We have run into issues updating deps before (like shelljs). Something like greenkeeper would lead to faster dep updates.
P. S. Usually we do the discussion in the discuss thread and leave the vote threads just for voting. On Nov 30, 2016 7:29 PM, "Filip Maj" <maj....@gmail.com> wrote: > The release notes in coho [1] note to check npm outdated dependencies. > When I run that against commit > 0c201c42344f63c7590c4190ba2285fa199300bb, I get: > > ~/src/cordova-ios on master via ⬢ v6.9.1 > ➔ npm outdated --depth=0 > Package Current Wanted Latest Location > nodeunit 0.8.8 0.8.8 0.10.2 cordova-ios > plist 1.2.0 1.2.0 2.0.1 cordova-ios > shelljs 0.5.3 0.5.3 0.7.5 cordova-ios > tmp 0.0.26 0.0.26 0.0.31 cordova-ios > > I might be rusty, is this a showstopper? Or do we not care about this > and the release notes need updating? > > [1] https://github.com/apache/cordova-coho/blob/master/docs/ > platforms-release-process.md#update-and-pin-dependencies > > On Wed, Nov 30, 2016 at 5:28 PM, Shazron <shaz...@apache.org> wrote: > > Please review and vote on this 4.3.1 iOS Release > > by replying to this email (and keep discussion on the DISCUSS thread) > > > > Release issue: https://issues.apache.org/jira/browse/CB-12203 > > > > The archive has been published to dist/dev: > > https://dist.apache.org/repos/dist/dev/cordova/CB-12203 > > > > The package was published from its corresponding git tag: > > cordova-ios: 4.3.1 (8fe24d41b0) > > > > Note that you can test it out via: > > > > cordova platform add https://github.com/apache/cordova-ios#4.3.1 > > > > Upon a successful vote I will upload the archive to dist/, publish it to > > npm, and post the blog post. > > > > Voting guidelines: > > https://github.com/apache/cordova-coho/blob/master/docs/ > release-voting.md > > > > Voting will go on for a minimum of 48 hours. > > > > I vote +1: > > * Ran coho audit-license-headers over the relevant repos > > * Ran coho check-license to ensure all dependencies and sub-dependencies > > have Apache-compatible licenses > > * Ensured continuous build was green when repo was tagged > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@cordova.apache.org > For additional commands, e-mail: dev-h...@cordova.apache.org > >
