REMINDER: Ruby's pessimistic versioning, Gemfile/Gemspec and random updates

[Sunpoet Po-Chuan Hsieh]

Hello,

Thanks for your reminder.
I know pessimistic version and I always check all dependent ports before
committing.
It would be helpful if you point out exactly what port is broken and we
could fix it ASAP.

Regards,
sunpoet

On Sat, Mar 26, 2016 at 8:17 PM, Johannes Jost Meixner <johannes at meixner.dk>
wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> As you know there's work going on with respect to bringing in Gitlab
> into the portstree.
>
> Now, ruby gems being what they are, most vendors use pessimistic
> versioning by default, to lock their gems to a specific version
> number. Often they're being locked to a specific patchlevel -- "~>
> 3.0.0" -- and hence even any MINOR update of a port that this gem
> depends on breaks it.
>
> It seems to have fallen in flavor to randomly update all the things,
> which is good in a way, but for the purpose of maintaining "important"
> software this creates a painful amount of overhead.
>
> Please make sure to ALWAYS test if a port you commit has other ports
> depending on it. On the danger of repeating advice I was told by my
> mentor at some point:
>
> *** BUILD TESTS ARE NOT ENOUGH. ***
>
> FreeBSD will build rubygems into ports whether gemspec/gemfile
> dependencies are satisfied or not.
>
> For visualizing the dependencies, freshports.org is a good source as
> far as default options are concerned.
>
>
> If you do not want to functionally test all the reverse dependencies
> of a port,
>
> *** DO NOT TOUCH IT ***.
>
>
> Thank you,
>
> Johannes
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQIcBAEBCAAGBQJW9n3PAAoJEElqnXBiUNQChWcP/RDeM//UKU1dLOwqjwDh2Lsv
> pKCSt8ghQW01u2NQFEHpvnyKfYA2hImsUM9Cu390XkdpoqUgzLoi35ZwwBD0Rph8
> lM+y/jTy4JUg1wkRne183bocI6ctneFQQi7zD1x4dtDQIiK5HjUD0nGz0ENBEkjE
> MrtzCnievSUYatBDwDJj5eK7D4E5EI4rPLM2zceAt8zQpD3yL/EPtwTSWKw8NYCI
> PPaZbIAXJ76mDRUy7wBxVFYPUKtOpJeUoY7xRa4iYtuasd3vaPgBkgTklhcIkmuz
> fCg0L6fkvCHvENnxR+kfg2RhvmDDly7E3o+cugLaVz40aTvGWt2EFJ64wzF6KzCY
> XDY+dNyiryDL3yIUIOda/oFZIt8Fhgj91/SSvZaeUWdIK3KGjc0TZC2/VWrCCiN/
> 3MIH7KJYHOxPrcwdyA/75qv4xfxbZIXK7AGHOOBhWfh2cGCaeTIDgfoKQ4UdizBS
> zOwzgEJ4yC5ObxYGDD0GUKH13S0zABtq5iRYiuFQzGvJw5HlLkIroDf6rRZzm8W0
> yDkTnU0IwHYpUeOGo6ZXDA23yHc25lei6fu1zX92Ck7wMsqpOYzCB/tnnFT48UZ5
> /oyEweYu3VXn2hxAB4TutnqyHPO/3p+xXNRdHbiuzR81jIdslvP7S1GnzoKXy+iS
> JfSl+S/MYhSbSg0GMqc/
> =MIIU
> -----END PGP SIGNATURE-----
>