Keeping dependencies up-to-date in Composer

1

Composer

In Good practices when working with Composer I discussed some basics about Composer. Something that is not discussed in that article is the importance of keeping your dependencies up-to-date. This goes for both libraries and applications. In this article I will focus on applications - codebases that also maintain a composer.lock file in source control. The majority of the tips and tricks however can also be used for libraries.

#Development Tools #Javascript UI Libraries #JavaScript Framework 124 social mentions

2

Dependabot

The most known tool for this is Dependabot. Dependabot integrates seemlessly into Github and is able to create pull requests for outdated dependencies. If you have set up automated tests on your codebase all you have to do is merge the pull request created by Dependabot. It does not get any easier.

#DevSecOps #Software Development #Continuous Integration 13 social mentions