Development Workflow

[azzamsa]

Hi.

I am very glad this tool exists. I have two question regarding the development workflow.

• What is purpose of signed commit? Should we put this reason somewhere in the docs?
• Why hurl always need newest deps: 1, 2.

Thanks a lot for Hurl! ❤️

[jcamiel]

Hi,

1 - the signed commit requirement is here to guarantee someone that a code has been changed by the author and not someone impersonating the author. With git, you can just set git config user.name 'Harisson Ford' and git config user.email [email protected]. With the GPG signature, verified by GitHub, you've stronger guarantees on the author's identity. You can find a lot of resources on the web on the benefit of signing your commits. Many other repos require signed commit Python, Deno among others.

2 - We always update Hurl with the newest dependency as soon as possible:

• this way, "major" upgrades are easier,
• your dependencies are not "rotten": CVEs are fixed
• Hurl benefits right way from bug resolutions and performance improvments.

We know the benefits and the drawbacks of dependencies and we prefer this way of managing dependencies. We see it as "we prefer to do a little easy cleaning every day than a big difficult cleaning every 6 months"!

[azzamsa]

Thank you so much for your detailed and thorough reply!