Hacker News Reader

You get more benefits from updating your dependencies than "just" bugfixes. There can be performance improvements or security updates in new releases. If you have a proper CI/CD pipeline and test environment(s) in place, it shouldn't be too much work. (Of course it highly depends on your domain.) Then the benefits clearly outweight the extra effort.

View on HN

> There can be performance improvements or security updates in new releases

Of course the opposite could also be true - performance could degrade or new security issues could be created.

I agree with your second statement that with a proper CI/CD pipeline, updates should be managabale.

Also: https://twitter.com/gabro27/status/1173547934132178944?lang=...

Absolutely! But that's another topic, namely "How much time should I wait after the release of a new version before updating?" :) That highly depends on the kind of software you are working on and the supplier of the given dependencies (trust/experience/ability and willingness to self-test new versions).

Reply on news.ycombinator.com