undefined | Better HN

0 pointsbckr2y ago0 comments

Would it not work to specify the version when installing the packages?

0 comments

Only to an extent. I can't think of a language environment where each package can have its own version of a dependency. Python certainly isn't one.

So if you want any of the Flask 3.0 features you have to take the new Werkzeug, and see Flask-Login break.

fiddlerwoaroof2y ago

Node lets every package have its own versions of dependencies. But, imo, it’s better (less time spent fixing upgrade breakage/incentive to pick stable dependencies) in the long run to depend on latest and always update, fixing breakage as you go and only locking versions in CI so you can deploy a known bundle.

rgoulter2y ago

Of "Frequently update dependencies to latest" or "don't have to modify code which depends on others", you only get to pick one.

If you're frequently updating to latest, you're on the bleeding edge; sometimes things will bleed more than others.

If you're stable, you might not have the latest and greatest all the time.

The attitude of expecting to always have the latest and greatest, but never have anything break, all while not paying for the effort, seems absurd to me.

1 more reply

jasonpeacock2y ago

Rust (Cargo) supports this.

fiddlerwoaroof2y ago

No, because your users basically have to upgrade eventually, unless you commit to provide bug fixes (security especially) for every major version.

j / k navigate · click thread line to collapse

0 comments

seanc2y ago

Only to an extent. I can't think of a language environment where each package can have its own version of a dependency. Python certainly isn't one.

So if you want any of the Flask 3.0 features you have to take the new Werkzeug, and see Flask-Login break.

fiddlerwoaroof2y ago

rgoulter2y ago

Of "Frequently update dependencies to latest" or "don't have to modify code which depends on others", you only get to pick one.

If you're frequently updating to latest, you're on the bleeding edge; sometimes things will bleed more than others.

If you're stable, you might not have the latest and greatest all the time.

The attitude of expecting to always have the latest and greatest, but never have anything break, all while not paying for the effort, seems absurd to me.

1 more reply

jasonpeacock2y ago

Rust (Cargo) supports this.

fiddlerwoaroof2y ago

No, because your users basically have to upgrade eventually, unless you commit to provide bug fixes (security especially) for every major version.

j / k navigate · click thread line to collapse