Hacker News new | ask | show | jobs
by viraptor 2291 days ago
> any testing you do based on them helps no one.

Counter example: they help PR authors.

With a lockfile - CI fails which means the issue is most likely in the change.

Without a lockfile - CI fails which means the issue is with the change, or the new dependencies, or the distribution of the new dependencies, or...

Ideally testing new changes and updating deps are two completely separate processes.