Dependency Management: Where the Fork are We?
summary
Dependencies are everywhere and automating them cuts technical debt and improves security but is hard because files and version schemes vary widely. Built an automation tool called updatecli (started as bash then Python then Go) that reads manifest files, pulls versions from GitHub releases and Maven, checks conditions like Docker image existence, performs batch upgrades, and opens PRs with auto-merge; it runs in CI and on Jenkins, works in production, and reduces noisy one-by-one bumps though manifest authoring and maintenance remain a pain.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:30Dependency what? Development
- 2:15Standard Data Structure Developer
- 5:20Hash Versioning
- 7:04Build Number Versioning
- 7:59Semantic Version
- 9:42Solution: Versioning
- 10:57Challenges: Batch Upgrade Change all dependencies in one batch
related talks
38mAutomate or Stagnate: Surviving the Era of Continuous Updates
26mKnow Your Dependencies: A Guide to Automating Dependency Assurance
37mKeep Your Dependencies in Check
31mKeep your dependencies in check
42mDependency Updates: Before and After
33mKeep your dependencies in check
08mAll About Dependencies
38mKnow thy neighbours: dependency management done right.