Ubuntu TechHive
proposal.detail
Proposed

Dependency Yank Drill: Recover When Yesterday's Build Cannot Be Recreated

Handle missing packages, changed registries, lockfiles, mirrors, and supply-chain evidence.

Mixed · 2 hours · January 1, 2027 · June 3, 2026
#dependencies#supply-chain#builds

Description

section.description

A build that worked yesterday fails today because a package disappeared, a registry changed, or a transitive dependency moved. Participants investigate the failure, compare lockfiles, verify provenance, and decide how to restore builds without blindly trusting a random replacement.

The workshop covers artifact caching, private mirrors, checksum verification, dependency ownership, emergency patching, and communicating build risk. It is built for teams that need reproducible deployments, not lucky deployments.

support.yml

member support

1 supporter

Community members who want this event to happen.

Support
Propose
proposal.yml

Proposal Details

Status
Proposed
Difficulty
Mixed
Duration
2 hours
Target date
January 1, 2027
Created
June 3, 2026