Get the great feeling of up-to-date dependencies and secure software without all the boring manual work.

Hamburg, Copenhagen
Joined September 2016
Note for our Elixir users: Hex 2.0 has been published and we had to make a couple of small adjustments to adapt to the new resolver and its new error messages - We'll upgrade asap and that will hopefully make dependency resolution much more stable.
1
Our co-founder @halfbyte is at #euruko2022 and would love to talk to you. He also has a couple of stickers with him.
2
To whom it may concern: Due to the immediate yank of rails-i18n 7.0.4 and the way we update rails, we've messed up some of the rails 7.0.4 updates. This has now been cleaned up, make sure you update rails-i18n as well, though.
1
So, Yarn Berry support on Depfu is now available, with two important caveats (thread): 1) Depfu will not update the offline cache and 2) Only Yarn 3.x+ is supported. Offline cache support is difficult for us to do - If you need it, you'd need a CI job that updates it.
1
4
Yarn 3 has command line support for tools like Depfu in form of the mode switch. While building Yarn 2 support would be technically possible, it seemes wasteful and upgrading should not be a huge problem for most teams.
1
Yarn Berry support is probably missing a couple of things right now beyond those two caveats - Please let us know if you run into anything. (Let's see how many "interesting" issues will be caused by the plugin system, for example)
1
Just a quick heads up: Depfu will eventually roll out updates for the rubygem mimemagic to either 0.3.8 or 0.4.1 but this requires the installation of external dependencies prior to "bundle install". More info: github.com/mimemagicrb/mimem….
3
1
3
We're also seeing occasional update failures due to the yanked gem versions, but we should now be able to issue the upgrades to mimemagic to fix that. Please have a closer look at this if you run a rails app in production.
Our website is down in some regions due to DNS resolution problems but the rest of Depfu is working properly in the background. Our DNS provider is aware and working on a fix.
2
1
Everything should be working again. If you still see DNS issues, please let us know.
1
Liebe Kunden aus Deutschland: Wir wissen um die MWSt.-Anpassung und werden betroffene Rechnungen in den nächsten Wochen nach und nach korrigieren und die Fehlbeträge zurücküberweisen. Das ist nur leider eine ziemliche Sisyphos-Arbeit und nur teilweise automatisierbar.
Did you ever think about why updating a language runtime is not as convenient as merging a Depfu pull request? Well, we certainly did. Engine-Updates are now in Beta, details in the blog post: depfu.com/blog/update-your-e…
Heads up: We'll send out updates soon.
Rails 6.0.3.2 has been released! It contains an important security fix, so please upgrade soon. You can read about the release here: weblog.rubyonrails.org/2020/… Have a great day!!! ❤️
3
Service tweet: #railsassets have (again) forgotten to renew their SSL cert and thus updates for their gems are not coming through. Since this is not the first time this happened, we strongly suggest migrating away from their service.
2
Just to make sure we checked our databases to see if any of @Depfu's clients had one of the typos-squatted rubygems installed. Luckily this was not the case! Feels a little like being a proud parent :-D
1
1
7
Did you ever wonder when Depfu will send you the PR for a new version? We tried to explain it all and also give you more control with our new releases page: depfu.com/blog/when-do-we-cr…
1
If you’re using GitLab and were wondering if automated dependency updates could work for your team or project, we have good news for you: Depfu fully supports GitLab now! depfu.com/blog/depfu-for-git…
5
1
14