There's a trade-off here between automatic updates and consistency/reproducibility with lock files. I think for the long-term, the latter is more favourable given we're not super fast moving. Also, these aren't long-running or public services, so there isn't an inherent benefit to automatic updates from that angle, either.
There's a trade-off here between automatic updates and consistency/reproducibility with lock files. I think for the long-term, the latter is more favourable given we're not super fast moving. Also, these aren't long-running or public services, so there isn't an inherent benefit to automatic updates from that angle, either.
Source: https://github.com/jquery/infrastructure-puppet/blob/36c836b89b9c4f2458005afd00b03762aa9cc3d1/modules/profile/files/builder/builder-do-update.sh#L15