tiagobento opened a new issue, #3798: URL: https://github.com/apache/incubator-kie-tools/issues/3798
In the past few months, many issues [1] were raised to upgrade dependencies, but many, MANY dependencies were ignored during this period, and as time passes, they become more obsolete and the cost of upgrading them keeps increasing. My proposal is that we define a strategy to keep our dependencies up-to-date, and healthy. This means constantly looking at our dependency graph and making use of tools that will tell us where we stand. The ideal world would be having all dependencies up-to-date at all times, thus avoiding security issues, like CVEs, and making it possible to use the latest features without polluting future feature/bug-fixing PRs. This work, however, show be carefully executed, not just blindly changing numbers on definition files like `pom.xml`s and `package.json`s. Each dependency has a reason to be imported, and it's expected that people maintaining them up-to-date and healthy are curious and self-motived to go deep into understanding the role each dependency plays. Although we did execute some version upgrades in the last few months, it's not sustainable to keep opening individual issues for each dependency upgrade we have, as we have thousands of them, and probably every day tens of them become obsolete. Upgrading older dependencies first might be a good strategy, as dependencies will tend to be obsolete for a shorter amount of time. [1] - https://github.com/kiegroup/kie-issues/issues/103 - https://github.com/kiegroup/kie-issues/issues/105 - https://github.com/kiegroup/kie-issues/issues/108 - https://github.com/kiegroup/kie-issues/issues/116 - https://github.com/kiegroup/kie-issues/issues/305 - https://github.com/kiegroup/kie-issues/issues/320 - https://github.com/kiegroup/kie-issues/issues/334 - https://github.com/kiegroup/kie-issues/issues/118 - https://github.com/kiegroup/kie-issues/issues/392 - https://github.com/apache/incubator-kie-tools/issues/1877 - https://github.com/kiegroup/kie-issues/issues/467 - https://github.com/kiegroup/kie-issues/issues/468 - https://github.com/kiegroup/kie-issues/issues/488 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
