Strengthen Our Developer eXperience to Face Obsolescence and View...
summary
The talk demonstrates a practical Developer Experience workflow to confront dependency obsolescence and vulnerabilities using concrete tools: Maven Versions plugin to detect major version jumps, OWASP Dependency-Check to flag CVSS-like vulnerabilities (and fail builds), and IntelliJ showing issues in-IDE. It shows automation with Renovate (and Dependabot) generating merge requests, OpenRewrite recipes performing code migrations (examples: Spring 2.x→3.2 and Java 8→17/21), and creating a CycloneDX SBOM submitted to Snyk which returns 39 issues to triage.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 3:14Outdated dependencies analysis
- 10:44Vulnerability detection
- 16:30IDE and CI integration
- 23:34Code modernization
- 27:58SBOM and tools
- 30:00Conclusion
related talks
29mTools worth knowing
42mGetting more out of Maven
34mStaying Current A Journey in Software Maintenance
13mModernize your money-maker
33mKeep your dependencies in check
57mSurvival guide to continuously align and upgrade your Spring dependencies
57mRefactoring to Modernize Java Applications
42mApache Maven Survival Guide “Bring It On! -Mode”