miniblog.

Cargo.lock is great for having a known-good set of library versions for your project. I regret not pinning the rust version earlier though. I didn't even know the minimum rust version until I was enforcing it in CI!

Dependency management in Go: https://research.swtch.com/vgo-principles There's a tradeoff between work for libraries (declare your minimum version/any incompatibilities) vs work for programs (investigate when dependencies aren't compatible). If programs are more common, should we empower them?

At what point do we start talking about a minimum expected level automation in industries? To what extent are there industries that still lack basic automation?