Responding to recent concerns that hackers could upload rogue versions of common libraries to Maven Central, Sonatype has released a patch that closes a security vulnerability, enabling SSL by default.
Google engineers have recently published a research paper presenting an empirical study of 26.6 million builds produced during a period of nine months by thousands of developers at Google. The paper describes the build workflow, and analyzes failure frequency, compiler error types, and resolution efforts. Such a study, its authors say, can help improve the build process and support to developers.
Pivotal last week released the first version of their new Spring IO Platform 1.0. At its core, the Spring IO Platform is a list of dependencies (and their versions) that work well together. Its implementation is a Maven POM file that you can import into your projects to set the versions for dependencies. These dependencies are curated and harmonized across Spring projects.
Using the Deployment Notification plugin for Jenkins developed by CloudBees and either the additional Chef Software plugin or Puppet Labs plugin, engineers can now trace every file installed by Chef or Puppet within Jenkins CI.
Deutsche Telekom is using Ravello Systems' nested virtualization solution in its development and testing cycles and in the configuration management process as well. The Ravello’s appliance helps Deutsche Telekom to spread their solutions globally, following the principles of flexibility and agility pursued by them.
The Internet of Things, Web APIs and Big Data will make continuous development a necessary reality and will tie developers down with maintenance work on completed applications, says Andrew Binstock of Dr. Dobbs. In that case, short sprints, continuous integration and deployment and modern programming practices are even more important to ensure a developer's time is better utilized.
Daniel Schauenberg described at QCon London how Etsy, renowned for its DevOps and Continuous Delivery practices, does 50 deploys/day. A fully automated deployment pipeline, thorough application monitoring and IRC-based collaboration are all important to achieve this rate of change while keeping risk to a minimum. Etsy has about 60 million monthly visits and 1.5 billion page views per month.
ThoughtWorks has recently open sourced their Continuous Delivery (CD) tool, called Go, having its origins in CruiseControl and providing a pipeline process that covers the entire code development process: continuous integration, testing and deploying.
The recently released Android++ in closed beta enables you to build Android apps using Visual Studio with support for zero hardware restrictions, MSBuild, LLVM, GCC in addition to integrated GDB debugging.
James Wickett, from Gauntlt core team, gave a tutorial at Velocity Conf London about integrating security testing in the continuous integration cycle for early feedback on application security level. James stressed the importance of regularly checking for security as release delivery rates increase with continuous delivery.
Mobile Backend as a Service provider AnyPresence continues to hone their chops. Launching the fifth update to their self-titled platform geared for the enterprise. Co-founder Rich Mendis provides some insights for InfoQ readers…
T4 Editor 2.2.0 enables you to create a library of reusable snippets in addition to an ability to make use of project properties with include and assembly directives, which works not only in the standard IDE but also in the msbuild host. It also includes support for Visual Studio 2013 Preview, new template gallery and F1support for directives.
Atlassian, makers of Jira and Confluence, have released version 5 of their continuous delivery tool Bamboo. Its deployment projects connect Jira Issues and code commits to deployments in various environments. It is possible, to mark a deployment as approved or broken. These features create end-to-end transparency from code to deployments supporting DevOps collaboration.
MSBuild has been renamed to Microsoft Build Tools. This new package includes Microsoft's C# and Visual Basic compilers, making all 3 freely available and independent from Visual Studio or the .NET Framework.
CONTENT IN THIS BOX PROVIDED BY OUR SPONSOR
Blog Series: A skeptic's guide to Continuous Delivery