如何更新作为jshint依赖项的lodash至4.17.5及以上版本？

Hey there! Let's work through updating the lodash dependency tied to jshint from version 3.7.0 to 4.17.5 or higher. Since lodash is a sub-dependency of jshint, we've got a few solid approaches depending on your package manager and needs:

1. Update jshint itself (the simplest approach) #

More often than not, newer versions of jshint already depend on a compatible, higher version of lodash. Updating jshint directly is the safest bet because it's tested to work with its specified dependencies. Here's how:

• First, check your current jshint version to see where you're starting:

  npm list jshint  # For npm users
  yarn list jshint # For Yarn users
  

• Upgrade jshint to the latest version (adjust --save-dev if jshint is a production dependency):

  npm install jshint@latest --save-dev # npm
  yarn upgrade jshint@latest           # Yarn
  

• Verify the lodash version now meets your requirement:

  npm list lodash  # npm
  yarn list lodash # Yarn
  

2. Force override the sub-dependency version (if you can't upgrade jshint) #

If you need to keep your current jshint version but still update lodash, use your package manager's dependency override feature:

For npm 8.x and newer #

Add an overrides section to your package.json to tell npm to use the desired lodash version for jshint:

{
  "overrides": {
    "jshint": {
      "lodash": "^4.17.5"
    }
  }
}

Then run npm install to apply the change.

For Yarn (all versions) #

Add a resolutions section to your package.json:

{
  "resolutions": {
    "jshint/lodash": "^4.17.5"
  }
}

Run yarn install to let Yarn enforce this dependency version.

3. Clean and reinstall dependencies (if overrides don't stick) #

Sometimes cached files or lock files can cause old versions to linger. Try this reset:

• Delete the node_modules folder:

  rm -rf node_modules       # Mac/Linux
  rmdir /s /q node_modules  # Windows Command Prompt
  

• Delete your lock file (package-lock.json for npm, yarn.lock for Yarn)
• Reinstall all dependencies:

  npm install  # npm
  yarn install # Yarn
  

• Double-check the lodash version again to confirm it's updated.

A quick heads-up #

Force-overriding sub-dependencies can carry minor compatibility risks. Be sure to run your test suite or verify jshint's functionality in a staging environment first to make sure everything works as expected!

内容的提问来源于stack exchange，提问作者José Carlos