This site requires you to update your browser. Your browsing experience maybe affected by not having the most up to date version.
Please use forum.silverstripe.org for any new questions
(announcement).
The forum archive will stick around, but will be read only.
You can also use our Slack channel
or StackOverflow to ask for help.
Check out our community overview for more options to contribute.
I'm curious as to how others are monitoring addons for required security updates? There's the SilverStripe Announce Google Group which is great, but I can't find a way to be notified when an addon is updated.
How are other devs tracking addons for their sites?
I don't know how others do this, but using Composer you should be able to do something like
composer update --dry-runThat should give you a list like this:
- Updating xxx/silverstripe-module1 (dev-master db94111) to xxx/silverstripe-module1 (dev-master 45eb795)
- Updating xxx/silverstripe/module2 (dev-master 6937d65) to xxx/silverstripe/module2 (dev-master d8295c2)without actually updating...
I was hoping there was a magic RSS feed or similar. I guess I'll be rolling a cron to check this and email a notification. Might try and build as an addon itself which can be added to any site.
There is an rss for new modules http://addons.silverstripe.org/add-ons/rss
Perhaps add a ticket about this feature at https://github.com/silverstripe/addons.silverstripe.org or if you are motivated perhaps could even look at writing and submitting that feature :)
I'm thinking that with hundreds of addons changing regularly you'd have to check that rss feed really often if you want to catch a change in a module you're using.
It would be nice to have a module that would point out module updates in the CMS. But i don't think modules themselves carry versions, so the only way would be to use the git version information in some way? Which should be present in your install...
Edit: or some addons api where you can check a version against eh... either a date or a git version id?
I was contemplating setting up an https://ifttt.com/ account which emails when keywords (e.g. the addon name) is seen in the RSS feed, but it's a lot to configure.
An addon itself is the way to go. All our sites will be using Composer, so that makes it a lot easier. Will probably go down that track soon.
I've just finished an addon which parses composer.json|lock and checks against Packagist for updates. Sends an email notification once found to whomever you configure.
