Dependabot for Jenkins plugin development

Automating dependency updates with Dependabot, based on the Jenkins experience.

Tags: jenkins dependencies automation

Slides

Abstract

What is common between Maven, NPM or RPM? It is dependency hell. Continuously updating dependencies is a significant overhead. If you do not do that, any next major update might be a problem for you. It is exactly what we hit while adding Java 11 support to Jenkins. What if we delegate such routine work to a bot? In our project we chose Dependabot, and in this talk I would like to do a brief introduction to the tool.

References

Presented at

  • Jenkins Online Meetup, 2019