Pin a specific commit of a plugin

[mattmc3]

Per getantibody/antibody#386:

Is it possible to pin a specific commit of a plugin in case of breaking changes?

[obvionaoe]

Are there any blockers to this feature being implemented? I'd like to help, if possible

[mattmc3]

No blockers - I've always thought of it as a pretty easy feature. I haven't done it yet because there hasn't been a lot of interest in it before now, and I just need some volunteers to test it.

My take on implementing the feature is this:

• Add a pin:SHA annotation that tells antidote which commit SHA you want for your plugins.
• Add a pin subcommand like: antidote pin [-r|--remove] [<PLUGIN>] [<SHA>]. This lets you pin (or unpin) a plugin (or all plugins) to either a specified SHA or whatever is current
• Ensure antidote update respects pinning and is a no-op for pinned repos
• Perhaps allow antidote update to unpin and then re-pin for a updates (a --force flag??)
• Figure out error handling of invalid SHAs
• Update all the docs

Any other relevant features you'd like me to consider as part of this feature?

[obvionaoe]

Adding a layer that could convert tags to commit SHAs, as I have a few plugins that I version using tags. I'd make it so that the pin annotation would support pin:SHA|TAG