Hacker News Reader

Im always wondering how people pinning versions manage software updates (security or not).

If you grow to a few hundred (or thousand or hundred of thousand) systems, it seems pretty hard to test and install combinations, and even if its a single combination with regular updates, you still need a very well oiled and consistent automated testing.

View on HN

> you still need a very well oiled and consistent automated testing

I would say this is true for any professional team. Nowadays I don't even develop personal projects without continuous delivery. The idea has been out there for years, and this year in particular there have been lots of articles explaining how to do it.

As opposed to not pinning versions and expecting your average Python/Perl/Ruby/PHP/nodejs library author not to introduce some crazy API breakage in a minor point release?

either way has issues, yes if you manage more than a few projects, you already run into libs that will get updates and break things, at least weekly ;)

Reply on news.ycombinator.com