libraries.yml version properties depend upon drupal core

Created on 9 July 2024, 6 months ago

Problem/Motivation

The libraries defined in libraries.yml use the core shortcut "version: VERSION". This causes the library manager to substitute the core drupal version. This is correct for core modules, but not for contrib modules. These version numbers should be replaced with actual version numbers, which are bumped when the version increases. Failure to do so may cause stale libraries to be loaded in production for a long time. See https://chromatichq.com/insights/drupal-libraries-version/ for a discussion.

Note: Using the commonly-seen "version: 1.x" will resulting even worse caching because it won't be invalidated by a core version update.

Steps to reproduce

1. Load a page with caching disabled (local dev).
2. Make a change javascript or css in a library.
3. Refresh the page in the browser. Notice that the change wasn't seen.

Proposed resolution

Supply an initial version for all libraries (e.g. 1.0.1), except those that depend only upon core resources. Then establish a procedure for updating these in any commits modifying dependencies of the particular library. Once option would be to use the version of the next upcoming version of webform (e.g. 6.2.4) whenever a dependency changes. As far as I know, these version numbers are used only for caching so any unique version number is okay.

πŸ› Bug report
Status

Active

Version

6.2

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States DanChadwick

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

  • Issue created by @DanChadwick
  • πŸ‡­πŸ‡ΊHungary mxr576 Hungary

    +1 on this

    For a start, I would just remove the "version" declaration which would lead to file content hashing in \Drupal\Core\Asset\AssetGroupSetHashTrait::generateHash() because that would default back to -1.

           // If the version is set to -1, this means there is no version in the
          // library definition. To ensure unique hashes when unversioned files
          // change, replace the version with a hash of the file contents.
          if ($asset['version'] === -1) {
            $normalized['asset_group']['items'][$key]['version'] = hash('xxh64', file_get_contents($asset['data']));
          }
  • Merge request !491Remove incorrect usage of VERSION β†’ (Open) created by mxr576
  • Status changed to Needs review 5 months ago
  • πŸ‡­πŸ‡ΊHungary mxr576 Hungary
  • Pipeline finished with Success
    5 months ago
    Total: 2085s
    #231987
  • πŸ‡¬πŸ‡§United Kingdom steven jones

    @mxr576 Thanks for this.

    I'm going to mark this as needs work, since webform has lots of submodules with libraries too, and the MR doesn't adjust those.

    I also wonder if it would be a suitable approach for webform to use its own constant in the files, like WEBFORM_VERSION and then at runtime do a library alter to swap out that string for the actual webform version, if one can be determined? We don't want all of contrib doing that, but maybe webform could?

  • Status changed to Needs work 5 months ago
  • πŸ‡¬πŸ‡§United Kingdom steven jones
  • πŸ‡¬πŸ‡§United Kingdom steven jones

    More generally, I like the proposed resolution, we might as well set everything to version 1, and then every time the JS/CSS in a library changes, increment that number. There's no need for it to be semver or anything exciting tbh.

  • πŸ‡¬πŸ‡§United Kingdom steven jones

    And...if you don't/can't/won't change the contrib versions, we're looking to get a workaround into our helper module that should 'fix' all contrib:
    https://www.drupal.org/project/cm_tools/issues/3464016 ✨ Fix contrib using VERSION in library definitions Needs review

  • πŸ‡ΊπŸ‡ΈUnited States DanChadwick

    This is sort of a core problem thrust upon contrib. Once could argue that VERSION in a module or theme should be interpreted as the module's version. So I think we should set aside WEBFORM_VERSION as scope creep. That leaves two good options:

    1. Remove all the version properties and rely on caching.
    Pro: Super simple.
    Con: a tiny bit of extra CPU time when the caches re being rebuild. I assume (without actually checking) that this is very infrequent.

    2. Add versions and be sure to update them during commit, checking for conflicts.
    Pro: More efficient at cache rebuild time
    Con: Requires developers to remember. Possible conflicts if the version is bumped twice before a conflicting merge is made, resulting in re-using an older version number.

    I propose we move forward with 1, including removal of all inappropriate versions in webform and all its submodules.

  • Pipeline finished with Success
    27 days ago
    Total: 196s
    #351645
  • Pipeline finished with Failed
    6 days ago
    Total: 696s
    #372661
  • Pipeline finished with Failed
    6 days ago
    Total: 676s
    #372722
  • Pipeline finished with Failed
    6 days ago
    Total: 766s
    #372801
  • Pipeline finished with Failed
    5 days ago
    Total: 815s
    #373402
  • Pipeline finished with Failed
    5 days ago
    Total: 729s
    #373966
  • Pipeline finished with Failed
    5 days ago
    Total: 732s
    #374080
  • Pipeline finished with Failed
    5 days ago
    Total: 953s
    #374123
  • Pipeline finished with Failed
    4 days ago
    Total: 792s
    #375025
  • Pipeline finished with Failed
    4 days ago
    Total: 705s
    #375222
  • Pipeline finished with Success
    4 days ago
    Total: 706s
    #375236
  • Pipeline finished with Failed
    4 days ago
    Total: 884s
    #375373
  • Pipeline finished with Failed
    1 day ago
    Total: 757s
    #376711
  • Pipeline finished with Failed
    1 day ago
    Total: 832s
    #376719
  • Pipeline finished with Success
    1 day ago
    Total: 903s
    #376726
  • First commit to issue fork.
  • Pipeline finished with Canceled
    1 day ago
    Total: 50s
    #377088
  • πŸ‡§πŸ‡ͺBelgium dieterholvoet Brussels

    Rebased and removed the remainder of version: VERSION lines.

  • Pipeline finished with Failed
    1 day ago
    Total: 2087s
    #377089
  • Pipeline finished with Failed
    about 21 hours ago
    Total: 734s
    #377408
  • Pipeline finished with Success
    about 19 hours ago
    Total: 1951s
    #377433
Production build 0.71.5 2024