News for hackers. Stuff that matters.

A comment on A response about dep and vgo. Parent comment

Re:A response about dep and vgo by bostonvaulter2 on Friday July 27, 2018 @08:15PM (#17630622)
When are you not supposed to commit a lockfile? I think the norm is to commit it.
[ Parent | on HN ]
Re:A response about dep and vgo by eridius on Friday July 27, 2018 @08:27PM (#17630685)
You're supposed to commit it for applications, but omit it for libraries. Libraries declare the versions they're compatible with but they don't lock to specific releases.
[ Parent | on HN ]
Re:A response about dep and vgo by skybrian on Friday July 27, 2018 @11:06PM (#17631291)
In at least some packaging systems, committing the lock file for a library is useful so that the library maintainers use the same versions. (It's ignored by users of the library.)
[ Parent | on HN ]