tslib should be a caret dependency

[dzearing]

Describe the bug

Across the various graphql-tools packages, because tslib is a tilde dependency (~2.3.0), newer minor releases of tslib release but applications that consume newer builds are unable to deduplicate them because of the tilde deps in the various graphql-tool packages. The tslib dependency should be a caret (e.g. ^2.3.0)

To Reproduce

Build an app using a newer tslib release (e.g. ^2.3.1), consuming any of the graphql-tools/* package versions that were built with a previous minor (e.g. @graphql-tools/[email protected], which depends on tslib ~2.1.0.) Evaluate lockfile, see dupes of tslib due to tilde dependencies.

Expected behavior

Use caret. In the above example, it would have deduped into 1 installed version (2.3.1.) Newer minor builds should be backwards compatible.

[ardatan]

Available with 173d034

[biro456]

Looking at both @graphql-tools/schema and @graphql-tools/utils in master, the range for tslib is still using tilde:

graphql-tools/packages/schema/package.json

Line 40 in cf44715

"tslib": "~2.4.0",

graphql-tools/packages/utils/package.json

Line 38 in cf44715

"tslib": "~2.4.0"

[n1ru4l]

@biro456 Can you send a PR for updating this?

[biro456]

Sure I can.

I checked and most packages are using ~2.4.0, so I'll change them to ^2.4.0.
@graphql-tools/url-loader is using ^2.3.0, so should I change that one too to make it consistent?