Versioning

A release tag gives people a readable name for a particular source revision. Unlike a branch, it does not advance when another commit is created. However, Git does not make a tag reference physically impossible to change: a user with sufficient access can replace or delete it. The dependable release contract is therefore a combination of a recorded object ID, an immutable-name policy, and controls over who may update release references. ...

A dependency version is useful when its publisher and consumers agree on the public contract. Semantic Versioning gives changes a vocabulary: from version 1.0.0 onward, incompatible public API changes require a major increment, compatible additions require a minor increment, and compatible fixes require a patch increment. The number summarizes a claim about a release. It does not inspect its implementation or guarantee that an upgrade will work in your application. ...