Index: mojo/public/dart/third_party/pub_semver/README.md |
diff --git a/mojo/public/dart/third_party/pub_semver/README.md b/mojo/public/dart/third_party/pub_semver/README.md |
new file mode 100644 |
index 0000000000000000000000000000000000000000..b359754077e6f5d8f0480e5f23c61da0523bc8a0 |
--- /dev/null |
+++ b/mojo/public/dart/third_party/pub_semver/README.md |
@@ -0,0 +1,98 @@ |
+Handles version numbers and version constraints in the same way that [pub][] |
+does. The semantics here very closely follow the [Semantic Versioning][semver] |
+spec. It differs from semver in a few corner cases: |
+ |
+ * **Version ordering does take build suffixes into account.** This is unlike |
+ semver 2.0.0 but like earlier versions of semver. Version `1.2.3+1` is |
+ considered a lower number than `1.2.3+2`. |
+ |
+ Since a package may have published multiple versions that differ only by |
+ build suffix, pub still has to pick one of them *somehow*. Semver leaves |
+ that issue unresolved, so we just say that build numbers are sorted like |
+ pre-release suffixes. |
+ |
+ * **Pre-release versions are excluded from most max ranges.** Let's say a |
+ user is depending on "foo" with constraint `>=1.0.0 <2.0.0` and that "foo" |
+ has published these versions: |
+ |
+ * `1.0.0` |
+ * `1.1.0` |
+ * `1.2.0` |
+ * `2.0.0-alpha` |
+ * `2.0.0-beta` |
+ * `2.0.0` |
+ * `2.1.0` |
+ |
+ Versions `2.0.0` and `2.1.0` are excluded by the constraint since neither |
+ matches `<2.0.0`. However, since semver specifies that pre-release versions |
+ are lower than the non-prerelease version (i.e. `2.0.0-beta < 2.0.0`, then |
+ the `<2.0.0` constraint does technically allow those. |
+ |
+ But that's almost never what the user wants. If their package doesn't work |
+ with foo `2.0.0`, it's certainly not likely to work with experimental, |
+ unstable versions of `2.0.0`'s API, which is what pre-release versions |
+ represent. |
+ |
+ To handle that, `<` version ranges don't allow pre-release versions of the |
+ maximum unless the max is itself a pre-release, or the min is a pre-release |
+ of the same version. In other words, a `<2.0.0` constraint will prohibit not |
+ just `2.0.0` but any pre-release of `2.0.0`. However, `<2.0.0-beta` will |
+ exclude `2.0.0-beta` but allow `2.0.0-alpha`. Likewise, `>2.0.0-alpha |
+ <2.0.0` will exclude `2.0.0-alpha` but allow `2.0.0-beta`. |
+ |
+ * **Pre-release versions are avoided when possible.** The above case |
+ handles pre-release versions at the top of the range, but what about in |
+ the middle? What if "foo" has these versions: |
+ |
+ * `1.0.0` |
+ * `1.2.0-alpha` |
+ * `1.2.0` |
+ * `1.3.0-experimental` |
+ |
+ When a number of versions are valid, pub chooses the best one where "best" |
+ usually means "highest numbered". That follows the user's intuition that, |
+ all else being equal, they want the latest and greatest. Here, that would |
+ mean `1.3.0-experimental`. However, most users don't want to use unstable |
+ versions of their dependencies. |
+ |
+ We want pre-releases to be explicitly opt-in so that package consumers |
+ don't get unpleasant surprises and so that package maintainers are free to |
+ put out pre-releases and get feedback without dragging all of their users |
+ onto the bleeding edge. |
+ |
+ To accommodate that, when pub is choosing a version, it uses *priority* |
+ order which is different from strict comparison ordering. Any stable |
+ version is considered higher priority than any unstable version. The above |
+ versions, in priority order, are: |
+ |
+ * `1.2.0-alpha` |
+ * `1.3.0-experimental` |
+ * `1.0.0` |
+ * `1.2.0` |
+ |
+ This ensures that users only end up with an unstable version when there are |
+ no alternatives. Usually this means they've picked a constraint that |
+ specifically selects that unstable version -- they've deliberately opted |
+ into it. |
+ |
+ * **There is a notion of compatibility between pre-1.0.0 versions.** Semver |
+ deems all pre-1.0.0 versions to be incompatible. This means that the only |
+ way to ensure compatibility when depending on a pre-1.0.0 package is to |
+ pin the dependency to an exact version. Pinned version constraints prevent |
+ automatic patch and pre-release updates. To avoid this situation, pub |
+ defines the "next breaking" version as the version which increments the |
+ major version if it's greater than zero, and the minor version otherwise, |
+ resets subsequent digits to zero, and strips any pre-release or build |
+ suffix. For example, here are some versions along with their next breaking |
+ ones: |
+ |
+ `0.0.3` -> `0.1.0` |
+ `0.7.2-alpha` -> `0.8.0` |
+ `1.2.3` -> `2.0.0` |
+ |
+ To make use of this, pub defines a "^" operator which yields a version |
+ constraint greater than or equal to a given version, but less than its next |
+ breaking one. |
+ |
+[pub]: http://pub.dartlang.org/ |
+[semver]: http://semver.org/ |