3 ms·
We should give up on reproducible builds because version numbers do not give enough information? What? Version numbers are what you expose to the real world, s
by egeozcan 9y ago
We should give up on reproducible builds because version numbers do not give enough information? What?
Version numbers are what you expose to the real world, something which semantic versioning tries to standardize. I shouldn't have to care if you use git, hg or copy-paste-versioning internally.
- akkartik 9y agoReproducible builds are great! I was talking about the flow for upgrading at development time, not deployment. You have your versions fixed in production but want to periodically upgrade your dependencies to pick up security fixes and bugfixes. Today that process is far from smooth. OP was an attempt at thinking through how one might design an eco-system to improve things. Pinning versions in Gemfile.lock is totally fine. Pinning versions in Gemfile is a bad idea.