This repository demonstrates the bumpVersion behavior of Renovate when only the package-lock.json
but not the package.json
is touched.
This repository uses Renovate's base
configuration, sets bumpVersion: patch
and enables lockFileMaintenance
.
The package requires renovate@34
and has it locked in the package-lock.json
to version 34.159.0
which is NOT the latest version matching the range 34
.
This lets Renovate create three PRs:
- #4 to bump the -lock file to the latest v34 (
34.160.0
) - #5 to bump the package to the latest v35
- #6 to maintain the lock file
Unfortunately, only the PR for the major version (#5) also bumps the version
in the package.json
.
The other PRs (#4 & #6) don't bump the version.
We expect it to update the version
in any case (for all PRs).