We are having a discussion about when we update a NuGet package or another external dependency. If we should update to this version everywhere, so we only have one version on the whole project. Some think we should, others think we shouldn't. The main reason to not update all location is that we need to re-test everything that uses this.
Can we trust external suppliers to test their code, so that we can upgrade minor versions freely? Is having basic unit-test coverage enough to test the changes.
Checklist:
- Does it build
- Check automated test coverage for dependency usage
- Read change-log in a pair to estimate risks
Or there other things we need to consider when updating libraries?