News for hackers. Stuff that matters.

A comment on Never update anything. Parent comment

Re:Never update anything by xcambar on Saturday November 06, 2021 @10:02AM (#29130268)
What's your workflow with lock files? Do you force them in CI/prod only or also in dev?

I'm tempted to enforce lockfiles at every stage of the product cycle, making upgrades an explicit action, rather than the side-effect/byproduct of another action. Does it make sense? What do you think?

[ Parent | on HN ]
Re:Never update anything by TheAceOfHearts on Saturday November 06, 2021 @04:19PM (#29133481)
Lockfiles get commited to the repo and used everywhere to avoid version differences. Upgrade dependencies as needed and have everyone reinstall when they change.

I'm amazed anyone wouldn't do this, it's the only sensible course of action.

[ Parent | on HN ]
Re:Never update anything by xcambar on Saturday November 06, 2021 @06:14PM (#29134322)
Some things go without saying, yet go better with saying.
[ Parent | on HN ]
Re:Never update anything by kabes on Sunday November 07, 2021 @02:45AM (#29137344)
Basically what TheAceOfHearts said. Always use them everywhere, except when explicitly upgrading dependencies. It's also much faster to do a 'npm ci' than an 'npm i'
[ Parent | on HN ]