Files
Draupnir/DEPENDENCIES.md
2026-03-20 15:54:21 +00:00

1.4 KiB

Dependencies

Pinned dependencies

@vector-im/matrix-bot-sdk

This is pinned and overridden because we need to have the exact same version for all dependencies. As we create and pass MatrixClient through Draupnir, matrix-protection-suite-for-matrix-bot-sdk, the vector bot-sdk fork itself, and also matrix-appservice-bridge.

postgres

https://github.com/porsager/postgres/issues/1143

This is pinned specifically as a work around for this issue.

Workspace dependencies

Workspace dependencies should be kept at their same version and changesets should be used for any changes. Package release should only be made from the main branch once changesets have been merged and the associated package versions bumped. This allows for the workspace state to always be used to build Draupnir reproducibly on any branch of PR.

Developer tooling

Developer tooling related devDependencies should be kept in the root package unless it is not common to most packages. This is to make sure the versioning remains consistent without relying on npm to do that.

Node

We try to follow the active LTS release to keep us more inline with the matrix-appservice-bridge stack of libraries.