Skip to content

Dependency Update Policy

David Ko edited this page Apr 18, 2024 · 12 revisions

Update Dependencies of Feature (Major/Minor) Release

For each feature release, need to update the following dependencies.

  • Component container base image (ex: BCI)
  • Kubernetes min version support
    • This can be determined by the upstream Kubernetes support versions, Longhorn usage metrics info, Rancher downstream provisioned cluster version, or other factors.
  • CSI sidecar versions
  • Go version
  • Kubernetes library versions
  • Major, Minor, Patch, and Digest dependent libraries. Major and Minor dependency updates will be individually reviewed.

Update Dependencies of Maintenance (Patch) Releases

  1. When updating versions, it is necessary to ensure that there will be no breaking changes causing incompatibility.
  2. DISALLOW updating the dependencies with major or minor version changes, as they could cause breaking changes.
  3. To resolve vulnerability issues, update the dependencies with the patch version only to ensure compatibility.
  4. If need to update minor versions of dependencies for inevitable reasons, need to ensure compatibility and run complete end-to-end tests.
  • Component container base image
  • Kubernetes libs
  • CSI side car components
  • Go version
  • Patch and Digest dependent libraries.

References

Clone this wiki locally