All software has dependencies: programming language, framework, and libraries. New versions for these dependencies with security fixes, bug fixes, or new features are regularly released. A new version is not always fully compatible with its predecessor. Teams that can rely on their test automation to answer the question of whether the new version of a dependency is problematic or not are in a good position.
This presentation shows best practices for upgrading dependencies without fear in projects that have high test coverage as well as approaches for projects without test automation.
I most recently presented "Fearless Dependency Upgrades" at the International PHP Conference on . Previous events include betterCode() PHP.
My name is Sebastian Bergmann, and I have been working as a software developer and consultant in the PHP ecosystem for over 25 years. I support development teams in creating better software through modern practices, tools and training.
I am deeply committed to Open Source, maintain critical Open Source projects in the PHP ecosystem, and help shape the work of the PHP Foundation as a member of its board. I have also represented the interests of Open Source at the European Commission and am active in the Open Source Working Group ("Arbeitskreis Open Source Software") of the German Informatics Society ("Gesellschaft für Informatik").
I live and breathe Open Source and help shape how developers around the world test, write, and maintain their code.
More events where you can meet me are listed here.
My interactive online training courses are designed to provide you with practical knowledge that you can apply immediately. The next ones starting soon are listed here.
This presentation is part of a series in which I explore the critical aspects of dependency management and security in PHP applications.
"The PHP Stack’s Supply Chain" and "Fearless Dependency Upgrades" focus on empowering developers to understand and safely manage their software supply chain: from fearlessly upgrading dependencies through comprehensive testing to understanding the broader security implications of the PHP ecosystem's interconnected components.
From to , I will be in Munich at the International PHP Conference. There I will give the presentations "30 Years of Code, 25 Years of Tests: A Journey Through Code and Community" and "Modern PHP Development".