Skip to content

Conversation

@upgradvisor-bot
Copy link

Hi there! Upgradvisor has identified that one of your repository’s dependencies has a newer version available, and we recommend you upgrade.

Your code currently pins humanize==1.0.0 when humanize 4.3.0 is available. The attached graph shows the dependency path of your repository relative to humanize. Your code is shown in green (each node is a method), and your code calling humanize is shown in orange. Changes between version 1.0.0 and 4.3.0 are shown as starred.

From the attached graph and manual tracing conducted by the team, between the two versions of humanize, the only major change resides in time.naturaltime, in which it only adds two additional parameters to the function and a string concatenation that are irrelevant to bashhub-client. We have tested the potential upgrade using bashhub-client's test suite and the upgrade won’t break any tests. Thus, we determine that it is a safe upgrade. (Please note that the down-stream changes are refactorings-only.)

Upgradvisor is a research project from Columbia University’s RCS lab. Our goal is to provide meaningful information for developers (like you) on how to upgrade their software dependencies. If you have any questions or feedback please reach out to the Upgradvisor team at [email protected].

Screenshot 2023-04-18 at 9 36 16 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant