{"action":"created","issue":{"url":"https://api.github.com/repos/masayuki0812/c3/issues/1166","labels_url":"https://api.github.com/repos/masayuki0812/c3/issues/1166/labels{/name}","comments_url":"https://api.github.com/repos/masayuki0812/c3/issues/1166/comments","events_url":"https://api.github.com/repos/masayuki0812/c3/issues/1166/events","html_url":"https://github.com/masayuki0812/c3/pull/1166","id":77120725,"number":1166,"title":"Allow patch upgrades to D3.js dependency","user":{"login":"timmclean","id":2249905,"avatar_url":"https://avatars.githubusercontent.com/u/2249905?v=3","gravatar_id":"","url":"https://api.github.com/users/timmclean","html_url":"https://github.com/timmclean","followers_url":"https://api.github.com/users/timmclean/followers","following_url":"https://api.github.com/users/timmclean/following{/other_user}","gists_url":"https://api.github.com/users/timmclean/gists{/gist_id}","starred_url":"https://api.github.com/users/timmclean/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/timmclean/subscriptions","organizations_url":"https://api.github.com/users/timmclean/orgs","repos_url":"https://api.github.com/users/timmclean/repos","events_url":"https://api.github.com/users/timmclean/events{/privacy}","received_events_url":"https://api.github.com/users/timmclean/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-05-16T20:22:43Z","updated_at":"2015-08-17T13:56:36Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/masayuki0812/c3/pulls/1166","html_url":"https://github.com/masayuki0812/c3/pull/1166","diff_url":"https://github.com/masayuki0812/c3/pull/1166.diff","patch_url":"https://github.com/masayuki0812/c3/pull/1166.patch"},"body":"We ran into a problem with D3.js that was resolved in a later patch version (v3.5.4).  This small change allows patch upgrades to D3.js (3.5.x) while locking the minor version (i.e., it won't upgrade to 3.6.x)."},"comment":{"url":"https://api.github.com/repos/masayuki0812/c3/issues/comments/131826120","html_url":"https://github.com/masayuki0812/c3/pull/1166#issuecomment-131826120","issue_url":"https://api.github.com/repos/masayuki0812/c3/issues/1166","id":131826120,"user":{"login":"SamMorrowDrums","id":4811358,"avatar_url":"https://avatars.githubusercontent.com/u/4811358?v=3","gravatar_id":"","url":"https://api.github.com/users/SamMorrowDrums","html_url":"https://github.com/SamMorrowDrums","followers_url":"https://api.github.com/users/SamMorrowDrums/followers","following_url":"https://api.github.com/users/SamMorrowDrums/following{/other_user}","gists_url":"https://api.github.com/users/SamMorrowDrums/gists{/gist_id}","starred_url":"https://api.github.com/users/SamMorrowDrums/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SamMorrowDrums/subscriptions","organizations_url":"https://api.github.com/users/SamMorrowDrums/orgs","repos_url":"https://api.github.com/users/SamMorrowDrums/repos","events_url":"https://api.github.com/users/SamMorrowDrums/events{/privacy}","received_events_url":"https://api.github.com/users/SamMorrowDrums/received_events","type":"User","site_admin":false},"created_at":"2015-08-17T13:56:36Z","updated_at":"2015-08-17T13:56:36Z","body":"D3 is on 3.5.6 now, is there any move on this? I'd really prefer to trust d3, and then pin the d3 version in C3, only after it breaks again. Even then, we should create an issue for updating d3 ASAP.\r\n\r\nThis is a cop-out, although an understandable one, from dealing with the fact d3 has in the past broken C3. We need to trust the Semver and raise issues on D3 if they add breaking changes accidentally on a patch version.\r\n\r\nWhen you have to manage large numbers of dependencies on projects, having repos take the attitude of \"it broke last time, so I'm not going to update this dep\" is counterproductive. It brings C3 out of sync with actively developed plugins."}}