Upgrade Triggers: Mandatory, Locking, Opportunity
A Dependabot PR, an EOL notice and a CVE bulletin share one queue but not one urgency. Sort signals into three types and give each a response time.
All tags
Tag
#dependencies
3 entries: Note, Essay.
-
-
The Cost of Deferring an Upgrade
A PHP 7.1 → 8.2 upgrade was put off because "it works." The bill came later: a dependency lock, batched breaking changes, and bugs spread over months.
- Essay 5 sections
The Cost of Installing a Package for Everything
The security, maintenance, and supply-chain cost of adding a dependency for a small function — and when writing it yourself is cheaper