How it works Open Source Enterprise Pricing
Login Signup

Depfu Blog

 

Depfu now flags security updates

We launched special handling of security updates - You'll get them earlier and with additional information on the vulnerabilities.

Gemfile's new clothes

Bundler 2.0 will change the filename of the Gemfile and Gemfile.lock. Let's look at why that is and what this means for you (and us).

How Depfu handles version constraints in your Gemfile

Since a lot of people asked about it, Depfu will no longer update gems when the new version is outside of your version constraints by default.

Bundler and private dependencies

A look at the many ways you can tell Bundler how to access private dependencies.

A more CI friendly Depfu

We changed how and when Depfu runs dependency updates on your repo to minimize the impact on your CI service.

Bundler’s new update options

Let's see how Bundler's new command line options allow you to be more conservative when updating gems.

A brief history of dependency management

We take modern dependency management solutions for granted these days, but how did it all start? What are the most important ideas and when and where were they introduced?

Bundler and Gemfile best practices

Taking care of your Gemfile with basic hygiene and some ongoing love will make life for future you much easier.

Treat your dependencies like your own code

Most Ruby libraries have nondeterministic builds caused by how they specify dependencies. Which means maintainers can't be 100% sure if their gem is working right now.

Get to know your twiddle wakka

That squiggly operator in your Gemfile, how does it work? Learn all about the pessimistic version constraint pattern in Rubygems and how to use it correctly.

Automated dependency updates done right — for Github and Gitlab

 

We believe doing small, easy to assess updates regularly and supported by automation is the best way for busy teams to keep their apps up-to-date.

Get your app up-to-date →