However, if you are in a highly regulated environment (finance, healthcare, federal), you may want to wait for the upcoming “Hardened” release (v46.1) which will add FIPS-compliant hashing. For everyone else—start upgrading now. Shell Dep Version 46 Hot is not just an incremental bump. It’s a fundamental rethinking of how shell dependencies should behave in modern CI/CD and development environments. The hot cache alone is worth the upgrade; add in hot swap and live security scanning, and you have a tool that finally makes dependency management as fast and seamless as it should have been from the start.
Instead of writing brittle which checks or embedding apt-get install commands in your scripts, shell-dep allows you to define a .shell-dep.toml file: shell dep version 46 hot
introduces a daemon-less shared memory cache. The first time you run a command, it builds a hot manifest in /dev/shm (or a Windows equivalent). Subsequent runs are almost instantaneous. However, if you are in a highly regulated
export SHELL_DEP_HOT_CACHE_DIR=/tmp/shell-dep-hot This means the binary’s signature is older than the max_sig_age (default 30 days). It still works, but you’ll see a warning. To silence, increase the age limit in .shell-dep.toml : It’s a fundamental rethinking of how shell dependencies
# macOS (Homebrew) brew upgrade shell-dep --fetch-HEAD sudo apt install shell-dep=46.0-hot Step 2: Verify the installation shell-dep version # Output: shell-dep 46.0-hot (commit: a7f3b2c, hot-cache enabled) Step 3: Create a test branch git checkout -b test/shell-dep-v46-hot shell-dep hot-upgrade git add .shell-dep.lock git commit -m "chore: upgrade to shell-dep v46 hot" Step 4: Run your pipeline Execute your usual build or test suite. Monitor for the new hot cache logs (they appear in green with a 🔥 emoji). Real-World Performance Gains Early adopters have reported dramatic improvements. Here’s a small sample:
[hot] max_sig_age_days = 60 You cannot hot-swap a binary that is currently running as a process (e.g., rg while a rg search is executing). Stop the process first, or use shell-dep hot-swap --force (not recommended). Is Shell Dep Version 46 Hot Production-Ready? Yes—with a caveat.
| Organization | Number of deps | v45 runtime (CI) | v46 Hot runtime | Savings | |--------------|----------------|------------------|-----------------|---------| | FinTechCorp | 28 | 47s | 12s | 74% | | CloudNativeCo | 112 | 3m 20s | 48s | 76% | | DevShop | 8 | 9s | 1.8s | 80% |