Conversation

Notices

1. Embed this notice
   Rob Napier (cocoaphony@mastodon.social)'s status on Friday, 08-Dec-2023 15:56:03 JST Rob Napier

   A reminder: When that major security bug shows up in one of your dependencies, and you need to ship a fix right now, that's not the time to discover you're 3 years and 6 API-breaking changes behind the version that has the fix.

   Upgrade your dependencies when you don't *have* to. That way, when it is critical, it will be fast and low-risk.

   This is *especially* true about that risky upgrade you've been avoiding. Take the hit now when you can schedule it. Don't let others schedule it for you.

   • Embed this notice
     Wolf480pl (wolf480pl@mstdn.io)'s status on Tuesday, 12-Dec-2023 09:23:21 JST Wolf480pl

     in reply to

     @cocoaphony hot take:

     If your dependencies made API-breaking changes on 6 different occasions within their lifetime, they're shitty dependencies

     Haelwenn /элвэн/ :triskell: likes this.