Long Term Ownership of an Event-Driven System

• renovate

  122 17,859 10.0 TypeScript

  Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

  

  You can ease some of the burden for yourself though using tooling. If you are using GitHub, dependabot can be configured to make automatic PRs to your repo whenever there are dependencies to update. If you're not a GitHub user, you can use renovate which even supports self hosting.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• semver

  762 7,291 0.0

  Semantic Versioning Specification

  

  Keeping dependencies up to date is crucial for the long-term health and security of your system. Regularly updating dependencies ensures that you benefit from upstream bug fixes, performance improvements, and security patches. If a library you are using uses Go modules, it will likely be using SEMVER to help both humans and machines figure out the impact of making a change. Semver promotes the following notation:

• distroless

  124 19,185 9.2 Starlark

  🥑 Language focused docker images, minus the operating system.

  

  The same as our code dependencies, container updates can include security patches and bug fixes and improvements. However, they can also include breaking changes and it is crucial you test them thoroughly before putting them into production. Wherever possible, I recommend using the distroless base image which will drastically reduce both your image size, your risk vector, and therefore your maintenance version going forward.

• watchtower

  219 19,781 6.5 Go

  A process for automating Docker container base image updates.

  

  Again, there are options to automate some of the burden here by using tools such as Watchtower.

Suggest a related project