News for hackers. Stuff that matters.
Re:OpenBSD won't update Firefox, advises users to switch to ESR by enriquto on Sunday January 12, 2020 @11:56AM (#22027320)
> From my point of view having a centralized repository with a (usually) single (usually) latest version of a library is an awesome thing

This reasoning assumes that future versions of software are always better. This is certainly not the case. I would like that a working program does not spontaneusly break because a third party "upgrades", thus introducing a new bug. I am willing to give up anything else to be assured that working programs continue to work no matter what.

Re:OpenBSD won't update Firefox, advises users to switch to ESR by bscphil on Sunday January 12, 2020 @09:20PM (#22031320)
I suppose I should clarify by "latest" that I mean a version of a piece of software that is actively supported and has all the security patches. Like it or not, the ecosystem is currently built around the assumption that you do want to have this, that nobody should still be running e.g. Firefox 34. The question is what the best way of shipping it is.

The conversation in the two posts you replied to isn't about whether you always want to be on the bleeding edge all the time, it's about whether it makes sense to have a centralized repository that contains the latest version on some supported channel, which isn't necessarily the same thing as the latest -nightly. I take the position that it is; that shipping a (potentially) different version of a library with every application is a bad approach which is often less secure and harder to maintain.

Re:OpenBSD won't update Firefox, advises users to switch to ESR by xg15 on Monday January 13, 2020 @03:15AM (#22032726)
But didn't the OP show exactly a situation where this system broke down?

There is a new version of the Rust library. In theory, either anything that supports it should be updated selectively (i.e. Firefox) or all consumers should be updated in lockstep. Yet in practice the maintener decided that neither option was feasible so nothing was updated at all. What went wrong here?