{"action":"opened","issue":{"url":"https://api.github.com/repos/erlang/rebar3/issues/1301","repository_url":"https://api.github.com/repos/erlang/rebar3","labels_url":"https://api.github.com/repos/erlang/rebar3/issues/1301/labels{/name}","comments_url":"https://api.github.com/repos/erlang/rebar3/issues/1301/comments","events_url":"https://api.github.com/repos/erlang/rebar3/issues/1301/events","html_url":"https://github.com/erlang/rebar3/issues/1301","id":171680729,"number":1301,"title":"Lock Plugins","user":{"login":"tsloughter","id":36227,"avatar_url":"https://avatars.githubusercontent.com/u/36227?v=3","gravatar_id":"","url":"https://api.github.com/users/tsloughter","html_url":"https://github.com/tsloughter","followers_url":"https://api.github.com/users/tsloughter/followers","following_url":"https://api.github.com/users/tsloughter/following{/other_user}","gists_url":"https://api.github.com/users/tsloughter/gists{/gist_id}","starred_url":"https://api.github.com/users/tsloughter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tsloughter/subscriptions","organizations_url":"https://api.github.com/users/tsloughter/orgs","repos_url":"https://api.github.com/users/tsloughter/repos","events_url":"https://api.github.com/users/tsloughter/events{/privacy}","received_events_url":"https://api.github.com/users/tsloughter/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-17T15:01:10Z","updated_at":"2016-08-17T15:01:10Z","closed_at":null,"body":"### Current behaviour ###\r\n\r\nPlugins aren't locked\r\n\r\n### Expected behaviour ###\r\n\r\nPlugins are locked.\r\n\r\nThis became a bigger pain recently when I updated the `rebar_alias` plugin to support a tuple in the list of alias commands. Since the old alias plugin already existed in peoples local hex package cache it would successfully fetch and build that version, try to use it and crash. If it were locked this wouldn't happen, it would have seen the version didn't exist in the registry, fetch a new copy of the registry and then install.\r\n\r\nObviously I could have manually pinned to a version of the plugin, I didn't, and I suspect others will not bother to and have this bite them and confuse their coworkers as well if we don't finally fix this :)"}}
{"actor":{"display_login":"tsloughter"}}