The problem is that shrinkwrap change here includes all possible dependency updates with +2,207 −2,626 diff.

Try to follow this guide #104 to regenerate only needed dependencies in shrinkwrap.

That guide is good, and I'm redoing the PR to follow that, but using npm update wouldn't change the hubot-botframework or hubot-spark dependencies the way I need to here, since I'm not trying to simply update those components to their most recently released versions. I'm trying to install those components from specific git commits, not released versions. For those I have to use npm install --save <...>.

I'm currently redoing this PR to break up the changes to package.json and npm-shrinkwrap.json into the individual npm operations, to give better clarity into why the diff for this PR is so large. Unfortunately there was a lot of churn in the Cisco Spark to Webex rename, so the diff for that change is still rather large. As far as I know, I can't do anything about that.

The npm update command didn't update hubot-stackstorm even though version 0.10.2 is released on NPM, so I used npm install --save hubot-stackstorm@^0.10.2 to update that one.

And a final docker-compose run xenial npm-shrinkwrap didn't change any files.