search

FuelLabs / data-systems

Fuel data systems related projects
Apache License 2.0
2 stars 6 forks source link

Patch Versioning for Dependencies #10

Closed Jurshsmith closed 1 month ago

Jurshsmith commented 1 month ago

Is there a reason we should lock patch versions? My main concern is that if there is a security patch, this would create an extra step to catch up.

_Originally posted by @Jurshsmith in https://github.com/FuelLabs/data-systems/pull/4#discussion_r1624171152_

pedronauck commented 1 month ago

No, there's no specific reason, we can go directly with minor if you think is better. The only concern is that we will been always updating Cargo.lock, so it's essential to have audit actions running properly to avoid automatically updates having bad minor versions.