Semantic Versioning Will Not Save You

Description

Summary

• 02 March 2021 The widely used Python package cryptographychanged their build system to use Rust for low-level code which caused an emotional GitHub thread.
• You have MAJOR.MINOR.MICRO and the promise is that as long MAJOR doesn’t change (aka a major bump), nothing will break and you can update your dependencies without prejudice.
• Or look for alternatives.
• Now if you pin urllib3 to <2, the user of your package doesn’t have it in their power to ever receive an update from urllib3 again, once urllib3 bumps its major version to 2 and beyond.6 They may not even realize how far back they are.