The installer script does not lock versions for its dependencies

DataDog / test-visibility-github-action

GitHub Action that installs Datadog Test Visibility

Apache License 2.0

3 stars 1 forks source link

The installer script does not lock versions for its dependencies #6

Closed offbyone closed 3 months ago

offbyone commented 3 months ago

The installer script at https://install.datadoghq.com/scripts/install_test_visibility_v1.sh does not make any versioning guarantees; it performs unversioned installations of the libraries from the respective packaging systems.

This means that if a new release disrupts workflows that use this action, there is no mechanism for reverting to a previous version in order to unblock.

nikita-tkachenko-datadog commented 3 months ago

Hi @offbyone, this is a valid concern, thank you for reporting it! The latest action release v1.0.6 adds a set of optional inputs that allow to lock tracing library versions.