External Publication
Visit Post

[RFC] "http-types" breakage / additions / rework

Haskell Community [Unofficial] June 19, 2026
Source

arybczak:

The biggest problem is that if you break API, then for people to use packages in their application/library that depend on http-types either all of them need to compile with the old http-types or all of them need to compile with the new http-types.

This is practice means tons of work/coordination/forking if anyone would want to migrate their dependencies to new http-types and not all packages they depend on have migrated.

Now, what is one of the reasons someone would like to do this, perhaps even urgently? Security vulnerabilities

It seems @hasufell’s suggestion of maintaining both the old and the new versions works fine for that scenario, no? If there’s a critical security issue in 0.12.5, just release 0.12.6 or even just 0.12.5.1 even if 1.0.0 is the latest version. That way nobody is suddenly urgently required to upgrade to the new version.

Discussion in the ATmosphere

Loading comments...