5 ms·
Libraries at least should have mechanisms to release 1.2.4 & yank 1.2.3 from whichever package repos they're on. Package repos generally won't allow pushing an
by __s 9y ago
Libraries at least should have mechanisms to release 1.2.4 & yank 1.2.3 from whichever package repos they're on. Package repos generally won't allow pushing an update to a version without version bump
- bandrami 9y agoThat's a horrible idea. What if I can't upgrade to 1.2.4?
- gvx 9y agoIt should always be possible to upgrade a patch level. How else would you get security updates?
- bandrami 9y agoI wait for it to be validated by the client and then apply the patch according to the established controls and protocols if the risk assessment team gives a green light.
- __s 9y agoFor crates.io it works out that if you yank a package no new packages can be published relying on the yanked version, but packages already relying on it can still download it
- lightbyte 9y agoHex.pm (for Erlang/Elixir packages) allows you to re-publish the same version multiple times as long as it's within a set window of time after the first upload.