{"action":"created","issue":{"url":"https://api.github.com/repos/rebar/rebar3/issues/791","labels_url":"https://api.github.com/repos/rebar/rebar3/issues/791/labels{/name}","comments_url":"https://api.github.com/repos/rebar/rebar3/issues/791/comments","events_url":"https://api.github.com/repos/rebar/rebar3/issues/791/events","html_url":"https://github.com/rebar/rebar3/issues/791","id":105838803,"number":791,"title":"rebar3 upgrading dependencies when it's not their turn to be upgraded","user":{"login":"joedevivo","id":55951,"avatar_url":"https://avatars.githubusercontent.com/u/55951?v=3","gravatar_id":"","url":"https://api.github.com/users/joedevivo","html_url":"https://github.com/joedevivo","followers_url":"https://api.github.com/users/joedevivo/followers","following_url":"https://api.github.com/users/joedevivo/following{/other_user}","gists_url":"https://api.github.com/users/joedevivo/gists{/gist_id}","starred_url":"https://api.github.com/users/joedevivo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joedevivo/subscriptions","organizations_url":"https://api.github.com/users/joedevivo/orgs","repos_url":"https://api.github.com/users/joedevivo/repos","events_url":"https://api.github.com/users/joedevivo/events{/privacy}","received_events_url":"https://api.github.com/users/joedevivo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-09-10T15:52:24Z","updated_at":"2015-09-11T21:58:16Z","closed_at":null,"body":"I tried to upgrade chef-server's version of `envy` this morning, but `rebar3 upgrade envy` actually wound up upgrading `envy` **AND** `epgsql`. See for yourself!\r\n\r\n```\r\n➜ oc_erchef git:(direct_solr_writes) rebar3 upgrade envy\r\n===> Verifying dependencies...\r\n===> Verifying dependencies...\r\n===> No upgrade needed for bcrypt\r\n===> No upgrade needed for chef_authn\r\n===> No upgrade needed for darklaunch\r\n===> No upgrade needed for ej\r\n===> Upgrading envy\r\n===> No upgrade needed for eper\r\n===> No upgrade needed for erlware_commons\r\n===> No upgrade needed for folsom\r\n===> No upgrade needed for folsom_graphite\r\n===> No upgrade needed for gen_bunny\r\n===> No upgrade needed for ibrowse\r\n===> No upgrade needed for jiffy\r\n===> No upgrade needed for lager\r\n===> No upgrade needed for mini_s3\r\n===> No upgrade needed for mixer\r\n===> No upgrade needed for neotoma\r\n===> No upgrade needed for opscoderl_folsom\r\n===> No upgrade needed for opscoderl_httpc\r\n===> No upgrade needed for opscoderl_wm\r\n===> No upgrade needed for pooler\r\n===> No upgrade needed for sqerl\r\n===> No upgrade needed for stats_hero\r\n===> No upgrade needed for sync\r\n===> No upgrade needed for uuid\r\n===> No upgrade needed for amqp_client\r\n===> No upgrade needed for bear\r\n===> No upgrade needed for edown\r\n===> Upgrading epgsql\r\n===> No upgrade needed for goldrush\r\n===> No upgrade needed for meck\r\n===> No upgrade needed for quickrand\r\n===> No upgrade needed for rabbit_common\r\n===> No upgrade needed for webmachine\r\n===> No upgrade needed for gen_server2\r\n===> No upgrade needed for mochiweb\r\n➜ oc_erchef git:(direct_solr_writes) ✗ git diff\r\ndiff --git a/src/oc_erchef/rebar.lock b/src/oc_erchef/rebar.lock\r\nindex 83cc695..c8afa1b 100644\r\n--- a/src/oc_erchef/rebar.lock\r\n+++ b/src/oc_erchef/rebar.lock\r\n@@ -28,7 +28,7 @@\r\n   0},\r\n  {<<\"envy\">>,\r\n   {git,\"https://github.com/manderson26/envy\",\r\n-       {ref,\"e6ba39664a1016ed309ea44269247943de2eb16b\"}},\r\n+       {ref,\"954c87adcfea892db462f56059eb8bc2857ab50b\"}},\r\n   0},\r\n  {<<\"eper\">>,\r\n   {git,\"https://github.com/massemanet/eper\",\r\n@@ -36,7 +36,7 @@\r\n   0},\r\n  {<<\"epgsql\">>,\r\n   {git,\"git://github.com/chef/epgsql-1.git\",\r\n-       {ref,\"cdb859d0d54fc4bed2107fd3d197bc7ea815958f\"}},\r\n+       {ref,\"c83a596bc184224c4ba4d9245cef506da79ac10e\"}},\r\n   1},\r\n  {<<\"erlware_commons\">>,\r\n   {git,\"https://github.com/erlware/erlware_commons\",\r\n```\r\n\r\nHow could this be? Our [rebar.config](https://github.com/chef/chef-server/blob/master/src/oc_erchef/rebar.config) has `envy` in it, but not `epgsql`. `epgsql` is actually pulled in from another dependency, `sqerl`. [Sqerl's rebar.config](https://github.com/chef/sqerl/blob/master/rebar.config) includes both `envy` and `epgsql` at `{branch, \"master\"}`, so I'm wondering if this \"sibling\" relationship between the master pins has something to do with it.\r\n\r\nWe've done the tragic workaround of just committing the one update to `rebar.lock`, but that's no way to live."},"comment":{"url":"https://api.github.com/repos/rebar/rebar3/issues/comments/139670525","html_url":"https://github.com/rebar/rebar3/issues/791#issuecomment-139670525","issue_url":"https://api.github.com/repos/rebar/rebar3/issues/791","id":139670525,"user":{"login":"tsloughter","id":36227,"avatar_url":"https://avatars.githubusercontent.com/u/36227?v=3","gravatar_id":"","url":"https://api.github.com/users/tsloughter","html_url":"https://github.com/tsloughter","followers_url":"https://api.github.com/users/tsloughter/followers","following_url":"https://api.github.com/users/tsloughter/following{/other_user}","gists_url":"https://api.github.com/users/tsloughter/gists{/gist_id}","starred_url":"https://api.github.com/users/tsloughter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tsloughter/subscriptions","organizations_url":"https://api.github.com/users/tsloughter/orgs","repos_url":"https://api.github.com/users/tsloughter/repos","events_url":"https://api.github.com/users/tsloughter/events{/privacy}","received_events_url":"https://api.github.com/users/tsloughter/received_events","type":"User","site_admin":false},"created_at":"2015-09-11T21:58:16Z","updated_at":"2015-09-11T21:58:16Z","body":"Hmm, yea, I'd like to figure this out, but it isn't obvious to me yet. I'll look this weekend."}}