News for hackers. Stuff that matters.

A comment on Rust Dependencies Scare Me. Parent comment

Re:Rust Dependencies Scare Me by cmrdporcupine on Friday May 09, 2025 @08:57PM (#43942388)
This is the default way of doing things in the monorepo(s) at Google.

It feels like torture until you see the benefits, and the opposite ... the tangled mess of multiple versions and giant transitive dependency chains... agony.

I would prefer to work in shops that manage their dependencies this way. It's hard to find.

[ Parent | on HN ]
Re:Rust Dependencies Scare Me by I_AM_A_SMURF on Friday May 09, 2025 @10:55PM (#43942877)
I've never seen a place that does it quite like Google. Is there one? It only works if you have one product or are a giant company as it's really expensive to do.

Being able to change a dependency very deep and recompile the entire thing is just magic though. I don't know if I can ever go back from that.

[ Parent | on HN ]
Re:Rust Dependencies Scare Me by ArthurStacks on Saturday May 10, 2025 @12:06AM (#43943141)
It isnt the default way at Google. Just the way in some parts of Google.
[ Parent | on HN ]
Re:Rust Dependencies Scare Me by cmrdporcupine on Saturday May 10, 2025 @12:45AM (#43943295)
It absolutely is so, or was for the 10 years I was there. I worked on Google3 (in Ads, on Google WiFi, on Fiber, and other stuff), in Chromium/Chromecast, Fiber, and on Stadia, and every single one of those repos -- all different repositories -- used vendored deps.
[ Parent | on HN ]
Re:Rust Dependencies Scare Me by bonzini on Saturday May 10, 2025 @02:44AM (#43943675)
It's the same that we're doing for external crates in QEMU's experiments with Rust. Each new dependency is added to the build by hand.
[ Parent | on HN ]