Long Term Ownership of an Event-Driven System

• renovate

  117 16,126 10.0 TypeScript

  Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

  

You can ease some of the burden for yourself though using tooling. If you are using GitHub, dependabot can be configured to make automatic PRs to your repo whenever there are dependencies to update. If you're not a GitHub user, you can use renovate which even supports self hosting.

• semver

  727 7,060 0.6

  Semantic Versioning Specification

  

Keeping dependencies up to date is crucial for the long-term health and security of your system. Regularly updating dependencies ensures that you benefit from upstream bug fixes, performance improvements, and security patches. If a library you are using uses Go modules, it will likely be using SEMVER to help both humans and machines figure out the impact of making a change. Semver promotes the following notation:

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• distroless

  123 17,914 9.4 Starlark

  🥑 Language focused docker images, minus the operating system.

  

The same as our code dependencies, container updates can include security patches and bug fixes and improvements. However, they can also include breaking changes and it is crucial you test them thoroughly before putting them into production. Wherever possible, I recommend using the distroless base image which will drastically reduce both your image size, your risk vector, and therefore your maintenance version going forward.

• watchtower

  215 17,173 8.2 Go

  A process for automating Docker container base image updates.

  

Again, there are options to automate some of the burden here by using tools such as Watchtower.

Suggest a related project