团队规范
dependency-upgrade
更新于 2026-10-10
Dependency Upgrades 工程规则
Upgrade rules: pinned versions, changelog review and staged rollout
- 技术栈
- Dependency Upgrades
- 主题
- 工程基线
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Make pipeline stages fail fast: format, lint, typecheck, test, build
- ✓ Pin action versions by commit SHA for anything touching credentials
- ✓ Cache dependencies keyed by the lockfile hash
✕ 常见反模式
- ✕ Secrets echoed into job logs or issues
- ✕ Pipelines that only run on the default branch
- ✕ Artifacts built twice with different toolchains across jobs
◎ 交付前验证
- ◎ Pipeline runtime measured; long jobs identified
- ◎ Required checks are enforced on merges
- ◎ Rollback job executed once against a real environment
同分类条目
17 篇团队规范
Git Conventions 工程规则
Commit rules: conventional prefixes, scoped messages and revertible history
团队规范
Branching 工程规则
Branching rules: short-lived branches and a single integration source of truth
团队规范
Monorepo 工程规则
Monorepo rules: workspace boundaries, affected builds and lockfile discipline
团队规范
ADR Process 工程规则
ADR rules: one decision per record with explicit consequences
团队规范
Local Dev Environment 工程规则
Dev environment rules: one command bootstrap and reproducible toolchains