{"action":"created","issue":{"url":"https://api.github.com/repos/voxpupuli/librarian-puppet/issues/54","repository_url":"https://api.github.com/repos/voxpupuli/librarian-puppet","labels_url":"https://api.github.com/repos/voxpupuli/librarian-puppet/issues/54/labels{/name}","comments_url":"https://api.github.com/repos/voxpupuli/librarian-puppet/issues/54/comments","events_url":"https://api.github.com/repos/voxpupuli/librarian-puppet/issues/54/events","html_url":"https://github.com/voxpupuli/librarian-puppet/issues/54","id":263074883,"node_id":"MDU6SXNzdWUyNjMwNzQ4ODM=","number":54,"title":"\"Could not resolve the dependencies.\" for two modules with different version requirements","user":{"login":"bodgit","id":559268,"node_id":"MDQ6VXNlcjU1OTI2OA==","avatar_url":"https://avatars2.githubusercontent.com/u/559268?v=4","gravatar_id":"","url":"https://api.github.com/users/bodgit","html_url":"https://github.com/bodgit","followers_url":"https://api.github.com/users/bodgit/followers","following_url":"https://api.github.com/users/bodgit/following{/other_user}","gists_url":"https://api.github.com/users/bodgit/gists{/gist_id}","starred_url":"https://api.github.com/users/bodgit/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bodgit/subscriptions","organizations_url":"https://api.github.com/users/bodgit/orgs","repos_url":"https://api.github.com/users/bodgit/repos","events_url":"https://api.github.com/users/bodgit/events{/privacy}","received_events_url":"https://api.github.com/users/bodgit/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-10-05T10:26:47Z","updated_at":"2018-06-07T10:32:03Z","closed_at":null,"author_association":"NONE","body":"Consider the following scenario:\r\n\r\nModule A has the following dependencies:\r\n* B `>=1.0.0 <2.0.0`\r\n* C `>=x.0.0 <y.0.0`\r\n\r\nModule C also has a dependency on the same module B but has a slightly more specific version requirement:\r\n* B `>=1.0.0 <1.9.0`\r\n\r\nIf module B has versions 1.8.8, 1.8.9, 1.9.0, 1.9.1, etc. available and I install module A with librarian-puppet then it will choose 1.9.1+ for module B and then fail to resolve the dependencies for module C leading to the \"Could not resolve the dependencies.\" error when it should choose 1.8.9 as that works for both modules."},"comment":{"url":"https://api.github.com/repos/voxpupuli/librarian-puppet/issues/comments/395373610","html_url":"https://github.com/voxpupuli/librarian-puppet/issues/54#issuecomment-395373610","issue_url":"https://api.github.com/repos/voxpupuli/librarian-puppet/issues/54","id":395373610,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NTM3MzYxMA==","user":{"login":"ekohl","id":155810,"node_id":"MDQ6VXNlcjE1NTgxMA==","avatar_url":"https://avatars0.githubusercontent.com/u/155810?v=4","gravatar_id":"","url":"https://api.github.com/users/ekohl","html_url":"https://github.com/ekohl","followers_url":"https://api.github.com/users/ekohl/followers","following_url":"https://api.github.com/users/ekohl/following{/other_user}","gists_url":"https://api.github.com/users/ekohl/gists{/gist_id}","starred_url":"https://api.github.com/users/ekohl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ekohl/subscriptions","organizations_url":"https://api.github.com/users/ekohl/orgs","repos_url":"https://api.github.com/users/ekohl/repos","events_url":"https://api.github.com/users/ekohl/events{/privacy}","received_events_url":"https://api.github.com/users/ekohl/received_events","type":"User","site_admin":false},"created_at":"2018-06-07T10:32:03Z","updated_at":"2018-06-07T10:32:03Z","author_association":"MEMBER","body":"I think librarian should manage dependencies but in a smarter way. Sadly there hasn't been much love for librarian-puppet recently. I tend to work around it by ensuring all my modules work with the latest versions. https://github.com/ekohl/puppet_metadata_checker is a small helper I wrote that could use some documentation. You can point it to metadata.json files and it looks at the forge if any dependency doesn't allow the latest version."}}
{"actor":{"display_login":"ekohl"}}