vue-i18n-bridge 9.3.0 peer dependency warning

[kingyue737]

Reporting a bug?

Add [email protected] will also add @vue/composition-api as its dependency which conflicts with [email protected].

 WARN  Issues with peer dependencies found
.
└─┬ vue-i18n-bridge 9.3.0
  └─┬ @vue/composition-api 1.7.2
    └── ✕ unmet peer vue@">= 2.5 < 2.7": found 2.7.14 

Expected behavior

No dependency warning

Reproduction

https://stackblitz.com/edit/vitejs-vite-fjumap

System Info

System:
    OS: Linux 5.0 undefined
    CPU: (6) x64 Intel(R) Core(TM) i9-9880H CPU @ 2.30GHz
    Memory: 0 Bytes / 0 Bytes
    Shell: 1.0 - /bin/jsh
  Binaries:
    Node: 16.20.0 - /usr/local/bin/node
    Yarn: 1.22.19 - /usr/local/bin/yarn
    npm: 9.4.2 - /usr/local/bin/npm
    pnpm: 8.6.10 - /usr/local/bin/pnpm
  npmPackages:
    vite: ^4.4.9 => 4.4.9 
    vue: 2.7.14 => 2.7.14 
    vue-i18n-bridge: ^9.3.0 => 9.3.0

Screenshot

Additional context

Run pnpm update or add whatever dependency will show the warning

Validations

• Read the Contributing Guidelines
• Read the Documentation
• Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
• Check that this is a concrete bug. For Q&A open a GitHub Discussions

[kazupon]

Thank you for reporting!

Hmm, 🤔
vue-i18n-bridge is defining @vue/composition-api as optionalDependencies.
https://github.com/intlify/vue-i18n-next/blob/1124ef852d9a6c1b13da90369c6705cd8edcf74a/packages/vue-i18n-bridge/package.json#L48C4-L49

peerDependencies of vue-demi might be having an effect.
https://github.com/vueuse/vue-demi/blob/main/package.json#L39

As the workaround, you can overrides with package manager.
example for pnpm:

  "pnpm": {
    "overrides": {
      "@vue/composition-api": "<1.7.0"
    }
  },

[kingyue737]

It seems that optionalDependencies are installed by default without --no-optional
https://pnpm.io/cli/install#--no-optional

Use peerDependenciesMeta like what vue-demi does may be a better way
https://github.com/vueuse/vue-demi/blob/80b8e939134c4d8e9457bd97235a46712ea0988a/package.json#L44

Curious why this change was made 7af7c1b

I'm not familiar with library development. Since vue-i18n-bridge does not import any API from @vue/composition-api directly. Do we still need to add @vue/composition-api in package.json? Is it enough to just rely on vue-demi?