InfoQ Homepage Continuous Integration Content on InfoQ
-
Bazel 2.0 Released with Performance and Stability Improvements
Bazel, the build and test tool that is based off of Google's internal build tool Blaze, recently released version 2.0. This release introduces a few flagged changes that will be incompatible with past versions as well as a number of other stability and performance improvements.
-
CircleCI Introduces New Orbs to Simplify Deployment Activities
CircleCI recently announced the availability of Deployment Orbs which focus on streamlining and simplifying the integration of deployment workflows into CircleCI jobs. This release includes orbs for deploying into common environments such as AWS, Google Cloud, Azure, Kubernetes, and Salesforce.
-
Yelp Open-Sources Fuzz-Lightyear, A Swagger-Based IDOR Vulnerability Detector
Business directory and crowd-sourced review service, Yelp, has open-sourced their in-house security testing framework, fuzz-lightyear, that identifies Insecure Direct Object Reference (IDOR) vulnerabilities.
-
Sonatype Disables Unencrypted Access to Maven
Sonatype has disabled unencrypted HTTP access to Maven Central, improving security for build systems such as Maven, Gradle, SBT, and other dependency systems.
-
Gradle 6 Brings Significant Dependency Management Improvements
Gradle, the customizable open source build automation tool, has released version 6.0 with significant improvements to dependency management, out of the box support for javadoc and source jars, and faster incremental compilation of Java and Groovy code. In addition, the latest release 6.1.1 supports a relocatable dependency cache for speeding up ephemeral CI builds.
-
Reducing Build Time with Observability in the Software Supply Chain
Tools commonly used in production can also be applied to gain insight into the CI/CD pipeline to reduce the build time. Ben Hartshorne, engineer at honeycomb.io, gave the presentation Observability in the SSC: Seeing into Your Build System at QCon San Francisco 2019.
-
Improving Continuous Integration at Dropbox Using Bazel
Benjamin Peterson recently shared how Dropbox leverages Bazel to improve their build and deploy experience. Using Bazel, Dropbox was able to scale their continuous integration and deployment pipelines to ensure quick feedback on commits. They achieved this by running only the affected tests within a grouping of commits and selectively pre-declaring which tests are gating to deployments.
-
GitHub Launches Mobile App, Notifications Beta, and Code Navigation Features
At this year's Universe Conference, GitHub made a number of announcements aimed at improving developer experience in the daily use of the platform, including a mobile client app and notification, as well as promoting workflow automation tools such as GitHub Actions and GitHub Packages to general availability.
-
Reduce Xcode Build Times Using Carthage and Caching Binary Dependencies
In a recent post, Spotify engineer Patrick Balestra explained how they managed to improve Xcode build time by 50% using dependency manager Carthage to avoid rebuilding dependencies over and over across their teams.
-
How to Remain Agile While Scaling
Managing the complexity and scale of both the business and the software were key challenges as Yext started to grow, said Sean MacIsaac at Agile Business Day 2019. Yext addresses this by having product solutions that are broadly applicable and configurable by their customer team, and by hiding complexity with independently deployable services with clearly defined interfaces.
-
CircleCI Adds Security Integrations to Streamline Securing CI/CD Pipelines
CircleCI announced the addition of new orbs that address common use cases and needs with securing your CI/CD pipelines. The orbs added to the repository with this release cover vulnerability scanning, secrets management, license scanning, and digital scanning. It includes integrations with AWS and Google Cloud.
-
Atomist Adds Drift Management Features to Minimize Process and Code Divergence
Atomist recently released Drift Management as a new feature within their Software Delivery Machine. This tool helps to track and control drift within repositories, libraries, and Docker images. Drift Management is open source and available in Atomist subscription plans, including the free tier.
-
Google Enables Continuous Testing Using the Android Emulator
The Android Emulator is the main tool Android developers use to test their apps. Google has just made integrating the Android Emulator within a continuous testing pipeline easier by open sourcing the Android Emulator Container Scripts and two related tools.
-
CircleCI Adds New Sumo Logic Integration to Provide Build Pipeline Analytics
CircleCI and Sumo Logic have released an integration to allow developers to view analytical data about CircleCI jobs from within a Sumo Logic dashboard. This integration is packaged using the CircleCI package management solution, Orbs. The integration includes real-time pipeline data such as number of failed builds, average run time, and job status.
-
GitLab 12.2 Supports Complex Dependencies for CI Tasks and Cross-Project Merge Requests
GitLab's latest release aims to enable complex continuous integration (CI) pipelines, team collaboration, and dependencies management across projects. Furthermore, GitLab 12.2 adds new push options for merge requests, and uses environment-specific Kubernetes namespaces to enable sharing the same cluster across multiple project environments.