Post #901459

I keep seeing posts from people backing off their UV + PIP updates by a week, and I'm curious about the adverse effects of waiting on security updates vs. installing them. This could do more harm than good unless I'm misunderstanding it. Take Django, which has very few dependencies https://github.com/django/django/blob/main/pyproject.toml#L9-L12 If you run a large-traffic website and know a security update has been released, I can't see why you shouldn't update it immediately. 🤔