Is there a way to specify an exact git hash in the dependencies of a Github project's package.json, while also making it easy to upgrade at a later time?
Here is how my current package.json looks:
{
"name": "my fabulous app",
"version": "1.0.0",
"dependencies": {
// ...
"request": "request/request#5ee89063cd"
}
}
This dependency comes from a Github project: https://github.com/request/request and uses the specific revision identified as 5ee89063cd.
I want to lock this version to ensure that anyone who clones my project and runs npm install will have the same version of the request dependency.
However, if an important bug fix becomes available, I would like to be able to easily update the revision in the package.json to the newest version on Github.
Is there a way to do this using the npm update command? How can I update the revision from the command line without having to manually edit the file?
My understanding is that when running npm install, it always takes the specified hash from the package.json. So, when using npm update, I would like the request dependency in the package.json to be updated to the latest repository version with the newest hash.
How can I make this happen? If not with npm update, is there another simple solution?