3 ms·
> Upgrade everything, all the time This is dangerous advice. There's some good advice underneath. Updating often addresses pain points iteratively and is easie
by reledi 11y ago
> Upgrade everything, all the time
This is dangerous advice. There's some good advice underneath. Updating often addresses pain points iteratively and is easier than doing major upgrades every year, for example.
But you should not be blindly updating your dependencies every week. It's a distraction and some updates require dev time to fix things (hopefully your integration tests catch some of these).
It's also dangerous if you update all without looking at changelogs. Maybe the new version of one dependency brings in ten new dependencies, or maybe it brings in security vulnerabilities, or maybe it's a completely different codebase or package was removed like what happened with the recent npm fiasco.
- andy_ppp 11y agoDangerous to do it and dangerous not to do it. The React ecosystem for example is a particularly fast moving fish; I think major releases in backend languages are far easier to be up to date with. I wonder if this applies to infrastructure too; always being on the latest version of Ubuntu for example seems overkill. Having said that, I think I generally agree with the sentiment of this article.