Inspecting dependency package version at runtime

You can just set it up like that, and run mix deps.update poison. It’ll fetch the most recent 4.x version.

If you need to test different versions in CI, then I would add a second mix.lock file, and do it similar to how Phoenix does it: phoenix/mix.exs at f3fe0188aaa53bfa10d7750cffe5008d211756bf · phoenixframework/phoenix · GitHub

That error would mean that Poison isn’t loaded before you run :application.get_key/2 in the current process. Have you checked that it’s loaded just before calling :application.get_key/2?