'how to update npm package, no new version

I'm maintaining a npm package for which I received a GitHub dependabot security alert for one of it's dependencies. I accepted the gh bot proposal which ended up in a gh pull request with an updated package-lock.json. I checked out the pr branch locally and run my tests against it. It is all ok and I want to merge it into master. But how do I publish the new package, do I have to create a new version or is it best practice to crate a new npm version? Because nothing else changed (only one dependency) can I just update the package without creating a new version? Thanks for your thoughts.

I read the npm documentation, but couldn't find any solution.



Solution 1:[1]

Well, I think you can try this in your terminal and will update the npm version. I think this would be helpful.

https://docs.npmjs.com/cli/v6/commands/npm-version

commands: this will update to the latest version.

npm install npm@latest -g

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 Milan Sachani