Lock version of prismjs?

[jennifer-shehane]

I ran into an issue today with prismjs and eventually tracked it down to their releasing a new 1.7.0 version 3 hours ago. I'm a little confused because I thought that the hexo-prism-plugin had it's dependencies locked. When I npm ls primsjs in my project, it prints this:

└─┬ hexo-prism-plugin@2.2.0
  └── prismjs@1.7.0 

How did the prismjs dependency update to 1.7.0?

[ele828]

Sorry for the late reply, did you use the latest NPM for installation? I guess that's because the lock file is not working correctly. You can update the NPM or install the prismjs of specific version directly.

[jennifer-shehane]

At the time I was on an older version of npm (I think 6.5.0) and am now on 8.4.0.