-
Book Overview & Buying
-
Table Of Contents
The Platform Engineer's Handbook
By :
Once a project is generated, it's just files in a repository. The template and the generated project are disconnected. When you fix a security vulnerability in the template, existing projects don't automatically receive that fix. This is the hardest problem in starter kit maintenance, and there's no perfect solution. We use Renovate to partially automate it, as shown in Figure 10.2.

Figure 10.2 - Using Renovate to automate the starter kit maintenance
The approach works like this: we publish a "template manifest" package that contains only metadata about the current template versions and their changelogs. Generated projects depend on this manifest. When we update the template, we publish a new manifest version. Renovate detects the version bump and opens a pull request in every project that depends on it.
The pull request doesn't automatically apply the template changes as that would be dangerous for projects that have...