UGRC applications have dependencies that are constantly updating to add new features, improve performance, and patch security issues. Keeping applications current with dependencies improves our security posture and allows for easier future enhancements since the amount of breaking changes is smaller and more trivial.
Benefit
The final sprint of the quarter is meant to be an Innovation and Planning (IP) Iteration. Benefits include:
Possible tasks include:
Acceptance Criteria
Dependabot and other modernization possible tasks
Notes
Dependabot
UGRC applications have dependencies that are constantly updating to add new features, improve performance, and patch security issues. Keeping applications current with dependencies improves our security posture and allows for easier future enhancements since the amount of breaking changes is smaller and more trivial.
Risks
Insecure applications using deprecated services
Issue Reference
refs #