Automated updates: Site owners will sleep soundly when security updates can be automated.
Event

Automatic Updates: Technical Overview and where you can help

Matthew Radcliffe
Matthew Radcliffe Initiative Day Lead

This session will give a technical overview of the Drupal Core Automatic Updates Initiative with a focus on helping explain where new contributors can help. The current work in the initiative is divided into several areas within Drupal core and in several separate libraries. We will detail the architecture of each area and progress that has been made. Some of the areas of expertise that would be helpful in this initiative are PHP(Drupal-specific and general), Python, Composer Plugin development, user experience and project management.


Among the topics we will cover are:

  • PHP-TUF: a client implementation of The Update Framework(TUF)
  • Composer PHP-TUF plugin: a Composer plugin that integrates the PHP-TUF library to ensure packages are secure
  • Drupal.org server implementation of The Update Framework: a TUF repository to provide signatures for Drupal releases and vendor packages
  • Composer Staged Update: a Composer plugin that will run updates within a temporary directory to allow Composer updates for Drupal sites without affecting the current site
  • Drupal Automatic in-place unattended updates: an automatic update system that integrates all of the above work

Come to this session if you want to learn how you can help with this important initiative or if you just want to find out more about the technical details about how Automatic Updates will work in Drupal core.