Upgrade or Chaos - How Renovate saves your Codebase from dependency disasters

Transcript

1. Jean-Marie Breleur - Senior Android Engineer @ XM Upgrade or Chaos How Renovate saves your Codebase from dependency disasters
2. Story-time 🫖
3. Story-time 🫖 Decide to work on Initiative Upgrade a dependency Test the App Release
4. Story-time 🫖 Decide to work on Initiative Upgrade a dependency Test the App 💥 Release 🚨
5. Story-time 🫖 Scenario not tested ? Code hard to review ? Find a way to test the screen ? From an old screen ?
6. Visualize the problem Lack information Release note Tools could help to fi x these problems ? Vulnerabilities
7. Tools could help to fix these problems ? Automated dependency upgrades
8. Renovate How it’s works ? * Implement Renovate Docker for self-hosted (could be directly from Github). * Add Gradle, Maven dependencies (could also support Swift, Go, PHP, Ruby, Python…). * Run the Renovate Job. * Review the Dashboard PR. * Merge it and Voilà ! 1 - Implement Renovate 2 - Con fi gure dependencies 3 - Run fi rst Renovate Job 4 - Review the Dashboard PR 5 - Merge it
9. Renovate Implement Renovate - docker command.
10. Renovate Con fi gure the dependencies - renovate.json
11. Renovate Con fi gure the dependencies - default.json
12. Renovate Con fi gure the dependencies - default.json
13. Renovate Con fi gure the dependencies - add security osv.dev check
14. Renovate Con fi gure the dependencies - group dependencies
16. Renovate Review the Dashboard PR
18. Renovate Next PRs
20. Renovate The bene fi ts * Fast feedback on vulnerabilities and upgrades. * Automated upgrades with detailed release notes (for instance Merge Con fi dence). * Extensive customization options. * Easy con fi guration sharing across projects.
21. Renovate Example on a real organization
22. Things to keep in mind Implement Share to the community Workshops Take Feedback 🔄 Iterate
23. Conclusion * Renovate simpli fi es dependency management. * Easily identi fi es breaking changes. * Simple to integrate and scale. * Conduct workshops and gather feedback post-implementation. * Continuously iterate and improve.
24. Thank you !