Use Caret (^) for Dependency Versions in package.json

[monilpat]

Is your feature request related to a problem? Please describe.

Currently, the project uses static dependency versions in package.json, which prevents automatic updates and may lead to outdated packages over time.

Describe the solution you'd like

Change all dependency versions in the package.json files across the repository to use the caret (^) notation. This will allow for minor version updates automatically, keeping dependencies up to date without manual intervention.

Code Example

{
  "dependencies": {
    "example-package": "^1.2.3"
  }
}

Describe alternatives you've considered

Leaving the static versions as they are, but this approach does not utilize the benefits of automatic updates and may lead to compatibility issues in the future.

Additional context

Using caret (^) for dependency versions can significantly enhance the maintenance of the project, ensuring that it remains current with the latest features and fixes from its dependencies.

Related Issues/PRs

None identified at this time.

[odilitime]

There was comments on a PR to remove carrots because we want to have locked versions to avoid supply chain problems. Not sure we want this.

[monilpat]

Yeah for sure see your point. We want this for some the dependencies like js-tiktoken etc with ^ as manually upgrading as new models get added doesn't feel like the way to go

…

On Wed, Jan 1, 2025 at 5:36 PM Odilitime ***@***.***> wrote: There was comments on a PR to remove carrots because we want to have locked versions to avoid supply chain problems. Not sure we want this. — Reply to this email directly, view it on GitHub <#1662 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADS6ROOZHA5CWPTPED3TXN32ISJZLAVCNFSM6AAAAABUPAUGA6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKNRXGIYTKNJQHA> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[monilpat]

Cool closing as it seems like something we will not want to do after hearing from other folks. I apologize for the runaround here.