How to track an updates to a 3party libraries?

X-Received	by 10.236.180.2 with SMTP id i2mr7081099yhm.4.1395040351943; Mon, 17 Mar 2014 00:12:31 -0700 (PDT)
X-Received	by 10.140.20.77 with SMTP id 71mr13862qgi.17.1395040351911; Mon, 17 Mar 2014 00:12:31 -0700 (PDT)
Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!usenet.blueworldhosting.com!feeder01.blueworldhosting.com!peer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!w5no5306762qac.0!news-out.google.com!bw18ni15307qab.1!nntp.google.com!hw13no5278453qab.1!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
Newsgroups	comp.programming
Date	Mon, 17 Mar 2014 00:12:31 -0700 (PDT)
Complaints-To	groups-abuse@google.com
Injection-Info	glegroupsg2000goo.googlegroups.com; posting-host=37.140.174.145; posting-account=A6QMogoAAABwDvT64JuKMBtz3-8NCKKU
NNTP-Posting-Host	37.140.174.145
User-Agent	G2/1.0
MIME-Version	1.0
Message-ID	<f06f11bd-0f19-4d8a-ae1b-24e00a778d2f@googlegroups.com> (permalink)
Subject	How to track an updates to a 3party libraries?
From	Alexander Artemenko <svetlyak.40wt@gmail.com>
Injection-Date	Mon, 17 Mar 2014 07:12:31 +0000
Content-Type	text/plain; charset=ISO-8859-1
X-Received-Bytes	1759
X-Received-Body-CRC	1871525061
Xref	csiph.com comp.programming:4136

Show key headers only | View raw

As a software developer, I use many 3-party libraries in my daily job. Mostly, they are python libraries, but I think this theme should be language agnostic.

In python, we could store project's dependencies in different ways. They could be stated in the setup.py file or in pip's requirements.txt file. Some programmers prefer to pin exact version numbers some are not. I'm belonging to the first group.

Although pinning exact version numbers keeps me from accidental update to a backward incompatible versions, it also keeps me from updating (and more importantly from discovering) to a bug/security fixes, introduced in these new versions.

What do you use to follow 3-party libraries updates? How to solve this problem and keep on a bleeding edge?

Back to comp.programming | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

How to track an updates to a 3party libraries? Alexander Artemenko <svetlyak.40wt@gmail.com> - 2014-03-17 00:12 -0700
  Re: How to track an updates to a 3party libraries? Öö Tiib <ootiib@hot.ee> - 2014-03-17 05:42 -0700
    Re: How to track an updates to a 3party libraries? Alexander Artemenko <svetlyak.40wt@gmail.com> - 2014-03-17 23:52 -0700
      Re: How to track an updates to a 3party libraries? Öö Tiib <ootiib@hot.ee> - 2014-03-18 10:13 -0700

csiph-web