{"action":"created","issue":{"url":"https://api.github.com/repos/aurelia/bootstrapper/issues/45","repository_url":"https://api.github.com/repos/aurelia/bootstrapper","labels_url":"https://api.github.com/repos/aurelia/bootstrapper/issues/45/labels{/name}","comments_url":"https://api.github.com/repos/aurelia/bootstrapper/issues/45/comments","events_url":"https://api.github.com/repos/aurelia/bootstrapper/issues/45/events","html_url":"https://github.com/aurelia/bootstrapper/issues/45","id":168084996,"number":45,"title":"Severe semver issues!","user":{"login":"jods4","id":3832820,"avatar_url":"https://avatars.githubusercontent.com/u/3832820?v=3","gravatar_id":"","url":"https://api.github.com/users/jods4","html_url":"https://github.com/jods4","followers_url":"https://api.github.com/users/jods4/followers","following_url":"https://api.github.com/users/jods4/following{/other_user}","gists_url":"https://api.github.com/users/jods4/gists{/gist_id}","starred_url":"https://api.github.com/users/jods4/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jods4/subscriptions","organizations_url":"https://api.github.com/users/jods4/orgs","repos_url":"https://api.github.com/users/jods4/repos","events_url":"https://api.github.com/users/jods4/events{/privacy}","received_events_url":"https://api.github.com/users/jods4/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2016-07-28T12:36:46Z","updated_at":"2016-07-28T14:35:04Z","closed_at":"2016-07-28T12:57:12Z","body":"There is a severe issue with the versioning scheme.\r\n\r\nApparently bower considers `1.0.0` a patch upgrade of `~1.0.0-rc.1.0.1`.\r\n\r\nResult: we got the upgrade unwillingly and it contained a regression for us (specifically my comment in aurelia/router#366).\r\n\r\n**But it gets _much_ worse!**\r\nWe tried to fix it by requesting the specific version `\"aurelia-bootstrapper\": \"1.0.0-rc.1.0.1\"` but it won't work either!\r\nBootstrapper requests its dependencies with `\"aurelia-***\": \"^1.0.0-rc.1.0.1\"`, which means that although we get the RC version of bootstrapper, we still get the 1.0 release of `aurelia-router`.\r\nSo short of specifying all packages resolutions ourselves in `bower.json`, we're stuck in a situation where we cannot get a working release.\r\n\r\nI believe the proper fix is that internal Aurelia packages should depend on specific versions, no `^` or `~`. And when a package is patched, you should publish new releases all along the dependency chain up to the top `aurelia-bootstrapper` package.\r\n\r\n_Aside: this might be an example where using the bundled Aurelia core is not only simpler, but less fragile. Do you think you should publish the bundled package on Bower & co in addition to CDNs?_"},"comment":{"url":"https://api.github.com/repos/aurelia/bootstrapper/issues/comments/235913487","html_url":"https://github.com/aurelia/bootstrapper/issues/45#issuecomment-235913487","issue_url":"https://api.github.com/repos/aurelia/bootstrapper/issues/45","id":235913487,"user":{"login":"EisenbergEffect","id":131485,"avatar_url":"https://avatars.githubusercontent.com/u/131485?v=3","gravatar_id":"","url":"https://api.github.com/users/EisenbergEffect","html_url":"https://github.com/EisenbergEffect","followers_url":"https://api.github.com/users/EisenbergEffect/followers","following_url":"https://api.github.com/users/EisenbergEffect/following{/other_user}","gists_url":"https://api.github.com/users/EisenbergEffect/gists{/gist_id}","starred_url":"https://api.github.com/users/EisenbergEffect/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EisenbergEffect/subscriptions","organizations_url":"https://api.github.com/users/EisenbergEffect/orgs","repos_url":"https://api.github.com/users/EisenbergEffect/repos","events_url":"https://api.github.com/users/EisenbergEffect/events{/privacy}","received_events_url":"https://api.github.com/users/EisenbergEffect/received_events","type":"User","site_admin":false},"created_at":"2016-07-28T14:35:04Z","updated_at":"2016-07-28T14:35:04Z","body":"Is there some reason you are using bower instead of npm? Bower has a lot of issues and they haven't been addressed even over a very long time. I would recommend thinking of using a more robust package manager solution."}}
{"actor":{"display_login":"EisenbergEffect"}}