Notes on software, systems, and AI.https://myblog.mycirrusit.com/enTue, 29 Sep 2026 00:00:00 GMThttps://myblog.mycirrusit.com/blog/version-pins-are-security-decisions/https://myblog.mycirrusit.com/blog/version-pins-are-security-decisions/A dependency range that cannot reach a patched release is not a preference. It is an unfixable vulnerability sitting in your lockfile.Tue, 29 Sep 2026 00:00:00 GMT