News for hackers. Stuff that matters.
Re:A response about dep and vgo by Athas on Friday July 27, 2018 @06:11PM (#17629866)
I don't think the lockfile is a big problem (and I don't have enough experience with lockfile-based systems), but if you already have some other file that can serve the same purpose, isn't that nicer than having two? It also means you don't have to be confused about whether lockfiles should be committed to version control (apparently the answer is "not always", which is counter-intuitive to me).
Re:A response about dep and vgo by bostonvaulter2 on Friday July 27, 2018 @08:15PM (#17630622)
When are you not supposed to commit a lockfile? I think the norm is to commit it.
Re:A response about dep and vgo by eridius on Friday July 27, 2018 @08:27PM (#17630685)
You're supposed to commit it for applications, but omit it for libraries. Libraries declare the versions they're compatible with but they don't lock to specific releases.
Re:A response about dep and vgo by skybrian on Friday July 27, 2018 @11:06PM (#17631291)
In at least some packaging systems, committing the lock file for a library is useful so that the library maintainers use the same versions. (It's ignored by users of the library.)