Plan for 0.25.1: clear the pull request backlog

[redfish4ktc]

This thread describes the plan for the next release, 0.25.1, and follows up on #1191. I will update it as the work progresses.

Feedback and questions are welcome in this thread.

Why a patch release first

As announced in #1191, the number of open pull requests has grown too much: there are currently 47, 33 of them from Dependabot, the others being mainly bug fixes and refactoring. This backlog makes it hard to see what is actually in progress.

The goal of 0.25.1 is to get rid of this debt as quickly as possible: merge everything that can safely go into a patch release, then release.

What goes into 0.25.1

• Dependency updates: Dependabot opened a large number of pull requests to fix security alerts, but most of them bump transitive dependencies, while the direct dependencies that pull them in are themselves outdated. We are going to update the direct dependencies first, which should bring in recent versions of most of these transitive dependencies along the way, then update the transitive dependencies still affected by a security alert. Reviewing and merging each Dependabot pull request separately would take a lot of maintenance time, so most of them will be closed, which lets us reduce that work and focus on the development of maxGraph.
• Bug fixes that do not change the public API, for instance fix(VertexHandler): rotate the children along with their parent #1152 and fix: enforce type-safe value in setCellStyles #1028.
• Refactoring with no impact on users, for instance moving the remaining members of AbstractGraph to their mixins (refactor(graph): move the viewport translation members to PanningMixin #1132, refactor(graph): move the cell, validation and overlay members to their mixins #1134, refactor(graph): move the label, z-order and page members to their mixins #1135, refactor(graph): move the drill-down members to GroupingMixin #1136).

What is deferred to 0.26.0

Pull requests bringing a new feature or a breaking change wait for the next minor version, so that they do not delay the patch release:

• Breaking changes: the extraction of the event names into EventNames (refactor!: extract the event names from InternalEvent into EventNames #1231), the restored mxGraph default of entryPerimeter and exitPerimeter (fix!: restore the mxGraph default of entryPerimeter and exitPerimeter #1160), the explicit function parameters (refactor(type)!: use explicit parameters in all functions #616).
• New features: the new options of VertexHandler (feat(VertexHandler): add margin and preview shape matching options #957) and the pinch zoom (New pinch touch zoom [draft] #149).

Next steps

• ⏳ Process the open pull requests, starting with the Dependabot ones.
• ⏳ Release 0.25.1.
• ⏳ Resume the work on 0.26.0 with the deferred pull requests.