A blunt review of my approach to a safe dependency upgrade · PitHub