23478 Posts in 18941 Topics by 2878 members
|Go to End|
14 April 2014 at 12:22pm
I'm curious as to how others are monitoring addons for required security updates? There's the SilverStripe Announce Google Group which is great, but I can't find a way to be notified when an addon is updated.
How are other devs tracking addons for their sites?
15 April 2014 at 1:12am
I don't know how others do this, but using Composer you should be able to do something like
composer update --dry-run
That should give you a list like this:
- Updating xxx/silverstripe-module1 (dev-master db94111) to xxx/silverstripe-module1 (dev-master 45eb795)
- Updating xxx/silverstripe/module2 (dev-master 6937d65) to xxx/silverstripe/module2 (dev-master d8295c2)
without actually updating...
15 April 2014 at 8:47am
I was hoping there was a magic RSS feed or similar. I guess I'll be rolling a cron to check this and email a notification. Might try and build as an addon itself which can be added to any site.
15 April 2014 at 11:22am
There is an rss for new modules http://addons.silverstripe.org/add-ons/rss
Perhaps add a ticket about this feature at https://github.com/silverstripe/addons.silverstripe.org or if you are motivated perhaps could even look at writing and submitting that feature
15 April 2014 at 8:42pm Last edited: 15 April 2014 8:50pm
I'm thinking that with hundreds of addons changing regularly you'd have to check that rss feed really often if you want to catch a change in a module you're using.
It would be nice to have a module that would point out module updates in the CMS. But i don't think modules themselves carry versions, so the only way would be to use the git version information in some way? Which should be present in your install...
Edit: or some addons api where you can check a version against eh... either a date or a git version id?
16 April 2014 at 8:43am
I was contemplating setting up an https://ifttt.com/ account which emails when keywords (e.g. the addon name) is seen in the RSS feed, but it's a lot to configure.
An addon itself is the way to go. All our sites will be using Composer, so that makes it a lot easier. Will probably go down that track soon.
29 April 2014 at 1:44pm
I've just finished an addon which parses composer.json|lock and checks against Packagist for updates. Sends an email notification once found to whomever you configure.
|Go to Top|