Keep Your Dependencies in Check • Marit van Dijk • GOTO 2023
This presentation was recorded at GOTO Copenhagen 2023. #GOTOcon #GOTOcph
Marit van Dijk - Developer Advocate at JetBrains & Open Source Contributor @maritvandijk
RESOURCES
@maritvandijk
://
@mlvandijk
ABSTRACT
If Log4Shell, Spring4Shell, etc. have taught us anything, it’s that we need to keep our dependencies up to date. But updating our applications can take a lot of time. How do we stay on top of that, while also continuing to deliver business value?
Luckily, there are plenty of tools that can help us with this, from package managers to bots that can automatically create changes on our repositories. Let’s go over some of the different options, so we can make informed choices about what’s best for us in a particular situation. [...]
TIMECODES
00:00 Intro
00:27 Open source software
02:00 Log4j
03:30 Spring4Shell
05:06 Do we need this dependency?
05:33 Selecting dependencies
10:03 Dependency information
12:54 Maintain dependencies
13:06 Maven
15:01 Gradle
15:41 Demo
19:43 IntelliJ IDEA
19:52 Pros & cons
20:23 Software composition analysis
21:45 Dependabot
24:24 Renovate
26:46 Snyk open source
30:17 Bots: Pros & cons
32:02 Migration tools
33:04 Error Prone
34:43 OpenRewrite
36:58 Conclusion
37:14 Outro
Download slides and read the full abstract here:
RECOMMENDED BOOKS
Mark Seemann & Steven van Deursen • Dependency Injection Principles, Practices & Patterns •
Heather Meeker • A Practical Guide to Open Source Software Licensing •
Mark Seemann • Dependency Injection in .NET •
#Dependencies #OpenSource #Log4j #Spring4Shell #UpdateDependencies #Maven #Gradle #IntelliJ #Dependabot #RenovateBot #Snyk #ErrorProne #OpenRewrite
Looking for a unique learning experience?
Attend the next GOTO conference near you! Get your ticket at
Sign up for updates and specials at
SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily.
1 view
0
0
1 week ago 00:00:41 1
Part 1| TowTruck Rage Fight/Smashes Parked Cars in Brooklyn, NY | #fighting #viralvideo #shorts
2 weeks ago 00:11:11 1
Archangels Healing Your Aura @432Hz In Just 11 Minutes With Delta Waves
2 weeks ago 00:40:25 1
40MIN Unilateral Leg Strength - Lower Body Workout
3 weeks ago 00:04:28 1
💸 HOW TO ALWAYS WIN AND PROFIT ON CRASH ROOBET! BEST ROOBET CRASH STRATEGY! ROOBET PROMOCODE 2024 💸
3 weeks ago 00:03:28 1
Nemo - The Code (LIVE) | Switzerland🇨🇭| Grand Final | Eurovision 2024
3 weeks ago 00:03:45 1
Marcus King - “Sucker” (from Arcane Season 2) [Official Visualizer]
3 weeks ago 00:03:11 1
Karli Wilkinson - Xpaxn
4 weeks ago 00:04:41 1
Crypto Wallet | Best Bitcoin Wallet | Top Crypto Wallet
4 weeks ago 00:05:36 1
How To Keep Your Personal Life Out of the Workplace
4 weeks ago 00:14:30 1
‘It’s time we knew the TRUTH!’ | Calls to end immigration ‘COVER UP’ as key data hidden from public
4 weeks ago 00:04:45 1
Hollywood Undead - Hollywood Forever (Official Music Video)
1 month ago 00:03:19 1
BODY COUNT - F*** What You Heard (OFFICIAL VIDEO)
1 month ago 00:04:13 1
KING DIAMOND - Masquerade of Madness (Official Music Video)
1 month ago 01:45:07 3
BREAKING! DEEP STATE PLANNING MARTIAL LAW IF TRUMP WINS ELECTION | Redacted with Clayton Morris
1 month ago 02:02:22 1
A State of Trance Episode 843 (#ASOT843)
1 month ago 00:03:58 42
GLYPHID SLAMMER - A Deep Rock Galactic Song Ft. Hatsune Miku, Kasane Teto, Zundamon, Kotonoha Akane
1 month ago 00:04:03 1
Queen – Keep Yourself Alive (2024 Special Edition)(Official Video)
1 month ago 00:04:17 1
Raven Numan - In Your Head (Official Video)
1 month ago 00:05:58 2
Michael Jackson - Thriller (Lyrics)
1 month ago 00:08:37 1
BBC FINALLY acknowledge vaccine harms... but it’s three years too LATE | Bev Turner
1 month ago 05:53:31 1
Hernan Cattaneo b2b Sasha Live In Denver HQ Remastered
1 month ago 00:00:00 53
LIVE STREAM: GALA Super Grand Prix World Grand Prix Mediterranean Legends | October 29 ⭐️