Introduction This post is about situations where software components that are commonly imported in as part of assembling production systems can slip outside of the normal expected path for detecting the availability and applying version upgrades. A couple of examples of systems that can be set up to detect when new versions of dependencies are available are: Renovate Dependabot Examples of dependency changes When a base Docker image went distroless When new versions stopped being released for the alpine distribution of the envoyproxy Docker image automation had nothing in place to detect that and raise it as a potential issue. I came across this when a production issue came up in another team's core infrastructure service. Since my team was going to be blocked until the incident wsa resolved, I followed the online chat discussion, checked some logs, did some Googling and established that the error that was being seen should have been resolved by a version of envoy that had been ava...
Professional software developer, producing scalable applications on the Internet