Dear package managers: dependency resolution results should be in version control

If your build depends on a non-exact dependency version (like “somelibrary >= 3.1”), and the exact version gets recomputed every time you run the build, your project is broken. You can no longer build old versions and get the same results. Want to cut a bugfixes-only release from an old branch? Sorry. Want to use […]