A routine gem update ended up creating $73k worth of subscriptions

Re:A routine gem update ended up creating $73k worth of subs... by blindmute on Saturday January 08, 2022 @12:33PM (#29853908)

I'd say that updating any version of anything, without reading the changelog, is irresponsible. Why are you updating a gem if you have no idea what has changed?

[ Parent | on HN ]

Re:A routine gem update ended up creating $73k worth of subs... by emodendroket on Saturday January 08, 2022 @02:47PM (#29855428)

In other programming environments people do this without issue routinely.

[ Parent | on HN ]

Re:A routine gem update ended up creating $73k worth of subs... by ljm on Saturday January 08, 2022 @04:31PM (#29856511)

I used to do this, especially with patch releases. Just bump the version and hope the build passes. My mindset has gradually shifted over time though.

These days, it's more a case of updating one thing at a time, and doing the research up front to see what I'm gaining from it or if I might as well stay on the current version. No point updating for the sake of it.

That's 5-10 minutes of up-front, preventative effort that might otherwise become hours of reactive firefighting, and as much time spent on damage control, if it got into production unchecked.

[ Parent | on HN ]