Problem/Motivation
I had svg_image and svg_embed both installed. While performing module updates, I discovered that both of these modules have a shared dependency - enshrined/svg-sanitize, however the way the dependency is required in svg_embed makes it impossible to update svg_image module to the latest version.
drupal/svg_embed 2.1.2 requires enshrined/svg-sanitize (^0.20) -- which is >=0.20 < 0.21
drupal/svg_image 3.2.1 requires enshrined/svg-sanitize (>=0.15 <1.0)
These version constraints do not overlap as you can see.
Steps to reproduce
Install both svg_image and svg_embed - observe that svg_image is one patch version behind.
Proposed resolution
Change the version range constrain to >=0.20 <1.0
Comments
Comment #2
jurgenhaasThis is strange. When using a constraint
^1.2it means the same as>=1.2 <2.0. Is that different for the zero major version? Happy to change that, though, but I'd like to understand the why as well.Do you want to provide an MR?
Comment #3
euk commentedYeah, here is the explanation: https://getcomposer.org/doc/articles/versions.md#caret-version-range-
I can throw an MR in a few.
Comment #5
euk commentedMR is in!
Comment #7
jurgenhaasThank you for the MR and the link to the explanation. Now I get why I got it wrong. Tagging a patch release in a minute.