[LRUG] Gemfile.lock for gems - to check in or not to check in, that is the question

Talk21 jason.hooper at talk21.com
Wed May 10 03:25:02 PDT 2017


I would follow the new advice. We are running a Ruby Padrino application that is now more than three years old. By committing the Gemfile.lock we have been able to keep all our remote servers and developer environments the same. We then can control upgrades to either the whole stack or single gems by bundling and then updating the Gemfile.lock and recommitting.

Regards,

Jason Hooper

> On 10 May 2017, at 11:08, Asfand Qazi <ayqazi at gmail.com> wrote:
> 
> Hello,
> 
> I have a question regarding Bundler, developing gems, and Gemfile.lock . It is a question I thought I had the answer to, but apparently not.
> 
> I USED to believe that you do not check in Gemfile.lock, so as to allow situations during development to occur where your gem is used with a version of a dependency that you did not expect, therefore allowing possibly breaking interface changes to dependencies to be made apparent. This is what Mr. Katz says here, in 2010: http://yehudakatz.com/2010/12/16/clarifying-the-roles-of-the-gemspec-and-gemfile/ <http://yehudakatz.com/2010/12/16/clarifying-the-roles-of-the-gemspec-and-gemfile/>.
> 
> However, checking the latest bundler docs, here we read something different: http://bundler.io/v1.14/guides/creating_gem.html <http://bundler.io/v1.14/guides/creating_gem.html>
> 
> "By running bundle install, Bundler will generate the extremely important Gemfile.lock file. This file is responsible for ensuring that every system this library is developed on has the exact same gems so it should always be checked into version control. For more information on this file read “THE GEMFILE.LOCK” section of the bundle install manpage."
> 
> Que?
> 
> What do y'all think? Follow the old advice, or the new advice?
> 
> Thanks
> 
> Regards,
>     Asfand Qazi
>     The DevOps Doctors
> 
>     E: asfand at thedevopsdoctors.com <mailto:asfand at thedevopsdoctors.com>
>     W: https://www.thedevopsdoctors.com/ <https://www.thedevopsdoctors.com/>
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> Archives: http://lists.lrug.org/pipermail/chat-lrug.org
> Manage your subscription: http://lists.lrug.org/options.cgi/chat-lrug.org
> List info: http://lists.lrug.org/listinfo.cgi/chat-lrug.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20170510/ff10f172/attachment.html>


More information about the Chat mailing list