Let's pin that dependency
summary
Claims that deterministic CI improves reproducibility and reduces flaky builds by pinning concrete versions across the stack, backed by a practical rollout: Unity extends open-source Renovate fork with regex manager to pin both internal and external deps for the Unity DOTS ecosystem (30+ packages), tested on Windows Linux Mac, and automates updates via Renovate while collecting metrics to triage PR noise. Concrete rules: pin exact versions not ranges; trade-offs are higher maintenance but a measurable drop in CI breakages and a retained PPM version that once broke CI.
AI-written summary · about
chapters (8)
- 0:00Dependency management at Unity
- 3:55Why dependencies matter
- 7:31CI and dependency challenges
- 12:31Unpinned dependencies in CI
- 17:51Costs of dependency pinning
- 21:04Automated dependency updates
- 27:33Customizing Renovate for Unity
- 30:45Results and future of pinning
related talks
31mRenovate/Dependabot: How to Take Back Control of Dependency Updates
24mManaging Dependencies with Confidence
01h 10mCreating efficient, convenient and reliable CI
36mThe future of dependency management, seen from 2022
45mHow to Automate Dependency Updates with the Renovate@Roche Bot
30mBringing Continuous Delivery to Open Source- 45mHow to Automate Dependency Updates with the Renovate@Roche Bot
42mSponsored Session: Dependencies: Do's and Don'ts