[RFC] "http-types" breakage / additions / rework
arybczak:
The biggest problem is that if you break API, then for people to use packages in their application/library that depend on
http-typeseither all of them need to compile with the oldhttp-typesor all of them need to compile with the newhttp-types.This is practice means tons of work/coordination/forking if anyone would want to migrate their dependencies to new
http-typesand not all packages they depend on have migrated.Now, what is one of the reasons someone would like to do this, perhaps even urgently? Security vulnerabilities
It seems @hasufell’s suggestion of maintaining both the old and the new versions works fine for that scenario, no? If there’s a critical security issue in 0.12.5, just release 0.12.6 or even just 0.12.5.1 even if 1.0.0 is the latest version. That way nobody is suddenly urgently required to upgrade to the new version.
Discussion in the ATmosphere