<!-- .slide: data-background="images/barn-raising-unsplash.jpg" class="center" style="padding: 1em 1em 1em 1em; color: white; background: rgba(0, 0, 0, 0.5); width: 60%; margin: auto; text-align: right;" --> # Automated<br/>Dependency Updates <!-- .element: style="font-size: 1.5em; color: white;" --> ## Closing vulnerabilities<br/>as they appear <!-- .element: style="font-size: 1.2em; text-transform: none; color: white;" --> *Nicholas Dille, Haufe Group* <p><img src="images/logos/heise-devsec_ohnetext.svg" style="height: 1em;" /> <a href="https://www.heise-devsec.de/">heise devSec</a></p>

## Summary <i class="fa-duotone fa-4x fa-lightbulb-on"></i> <!-- .element: style="float: right;" --> - <span class="fa-li"><i class="fa-duotone fa-link"></i></span> Ops and Devs require many dependencies - <span class="fa-li"><i class="fa-duotone fa-lock-keyhole"></i></span> Dependencies introduce (additional) security issues - <span class="fa-li"><i class="fa-duotone fa-arrows-rotate"></i></span> Automated updates help stay on top - <span class="fa-li"><i class="fa-duotone fa-crosshairs"></i></span> Automerging takes the load off dev and ops... - <span class="fa-li"><i class="fa-duotone fa-magnifying-glass-chart"></i></span> ...but requires thorough testing <!-- .element: class="fa-ul" style="line-height: 1.5em;" --> ### Upcoming events ~~2024-03-06 [heise devSec](https://www.heise-devsec.de) - [Nie wieder veraltete Dependencies](https://www.heise-devsec.de/veranstaltung-21977-se-0-nie-wieder-veraltete-dependencies--wie-sich-sicherheitsluecken-von-selbst-schliessen.html)~~ 2024-04-10 heise Workshop: [Einführung in GitLab](https://heise-academy.de/schulungen/einfuehrung-in-gitlab) 2024-04-16 [Mastering GitOps](https://www.mastering-gitops.de) - [GitOps und RenovateBot](https://www.mastering-gitops.de/veranstaltung-21902-se-0-gitops-und-renovatebot-die-zukunft-der-automatisierten-promotion.html) 2024-04-17+24 heise Workshop: [CI/CD mit GitLab](https://heise-academy.de/schulungen/cicd-gitlab)