News for hackers. Stuff that matters.

A comment on We shouldn't have needed lockfiles. Parent comment

Re:We shouldn't have needed lockfiles by zdragnar on Wednesday August 06, 2025 @04:28PM (#44817377)
> You can then add a <dependency> override in your pom.xml file specifying the one you want.

Isn't that basically a crappy, hand-rolled equivalent to a lock file?

[ Parent | on HN ]
Re:We shouldn't have needed lockfiles by Muromec on Wednesday August 06, 2025 @06:13PM (#44818474)
Of course it is
[ Parent | on HN ]
Re:We shouldn't have needed lockfiles by smrtinsert on Wednesday August 06, 2025 @09:51PM (#44819796)
A single override does not equate to an entire lockfile of dependencies.
[ Parent | on HN ]
Re:We shouldn't have needed lockfiles by zdragnar on Wednesday August 06, 2025 @11:48PM (#44820390)
And yet, that one manual override and an auto-generated lockfile require basically the same level of effort, and serve the same purpose.

Edit: actually, depending on the package manager, the auto generated lockfile takes less work than the single override, as they don't have the same issue maven does to require an override in the first place.

[ Parent | on HN ]