Keep Your Dependencies in Check

Explore strategies for managing and updating software dependencies in this 38-minute conference talk from GOTO Copenhagen 2023. Learn about the importance of keeping dependencies up-to-date, referencing recent vulnerabilities like Log4Shell and Spring4Shell. Discover tools and techniques for selecting, maintaining, and analyzing dependencies, including package managers, IDEs, and automated bots. Examine the pros and cons of various approaches, from Maven and Gradle to Dependabot and Renovate. Gain insights into software composition analysis, migration tools like Error Prone and OpenRewrite, and best practices for balancing dependency management with delivering business value. Equip yourself with the knowledge to make informed decisions about dependency management in your software projects.