BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.devconf.info//devconf-cz-2025//speaker//DFMR7W
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-devconf-cz-2025-RBVMBJ@pretalx.devconf.info
DTSTART;TZID=CET:20250613T153000
DTEND;TZID=CET:20250613T160500
DESCRIPTION:Keeping large Java applications up to date is a constant challe
 nge. Manual dependency and runtime upgrades are time-consuming\, error-pro
 ne\, and often pushed down the backlog because they lack immediate busines
 s value. Meanwhile\, outdated dependencies introduce security risks\, tech
 nical debt\, and compliance concerns—especially with new regulations lik
 e NIS2 and DORA\, which make timely software updates a legal requirement.\
 n\nBut what if upgrades could happen automatically?\n\nIn this hands-on se
 ssion\, I’ll demonstrate how to fully automate Java dependency upgrades 
 using Renovate\, OpenRewrite\, and GitHub Actions. Through a live Quarkus 
 2 → 3 migration\, you'll see how:\n\n1. Renovate detects outdated depend
 encies and automatically creates pull requests.\n2. OpenRewrite applies au
 tomated code fixes for breaking changes.\n3. Red Hat Developer Sandbox pro
 vides a pre-configured environment for manual adjustments—eliminating th
 e need for local setup.\n4. SBOMs (Software Bill of Materials) are generat
 ed and sent to Dependency-Track\, ensuring compliance with NIS2 and DORA w
 hile making security improvements visible to decision-makers.\n\nBy the en
 d of this session\, you’ll have a practical\, repeatable strategy to aut
 omate dependency management—keeping your Java applications secure\, comp
 liant\, and resilient with minimal manual effort and zero disruption to de
 velopment.
DTSTAMP:20260911T012611Z
LOCATION:E104 (capacity 72)
SUMMARY:Automated Java Upgrades: From Pain to Productivity in 30 Minutes - 
 Ludwig Steindl
URL:https://pretalx.devconf.info/devconf-cz-2025/talk/RBVMBJ/
END:VEVENT
END:VCALENDAR