eschutho commented on a change in pull request #14652:
URL: https://github.com/apache/superset/pull/14652#discussion_r644956016



##########
File path: Makefile
##########
@@ -38,6 +38,22 @@ superset:
        # Load some data to play with
        superset load-examples
 
+update:

Review comment:
       Ha ha.. so I've still been seeing updated package-lock.json files in PRs 
that shouldn't be there, but.. I tested it out with v 7.6.0 and pulled Superset 
1.0.0 and ran `npm install` and it updated the lockfile. :(
   Either way, we can leave this as is, but if we do, I think we should be 
extra vigilant about sneaky tailgaiting package-lock files in PRs. Technically 
it _should_ do no harm to have them updated, if the package is using semver 
correctly, but it just creates more ambiguity and room for potential bugs if 
it's there for no seemingly good reason. 




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to