Repository navigation
dotnet libman update installs deprecated package versions #724
Description
Describe the bug
If a deprecated version of a package exists with a higher version number than the currently installed version, the tool will install the deprecated version. This only seems to happen with the cdnjs provider.
To Reproduce
Steps to reproduce the behavior:
- Add the following entry under
librariesinlibman.json:
{
"provider": "cdnjs",
"library": "[email protected]",
"destination": "wwwroot/assets/libs/datatables.net"
}- Run
dotnet libman update datatables.netand the command will update to version2.1.1which is deprecated.
Expected behavior
Deprecated package versions should be ignored when updating.
Additional context
2.1.175+29a28921bd.RR
Activity
jimmylewis commentedon Mar 25, 2024
With CDNJS, the data used by libman comes from their catalog curation. In this case, CDNJS that says 2.1.1 is the latest version, and there's no indication from their API that it's been deprecated.
You could try sending them feedback via https://github.com/cdnjs/cdnjs/issues to either set another version as latest, or to add a feature to include deprecation metadata so that libman could consume that and exclude deprecated versions.