[ TOPIC ]

dependency-management

7 real merged PRs across 6 projects, ordered easiest to hardest. Read them in order to see how dependency-management shows up in production code, then go deeper with the free papers and talks below.

[ 01 // REAL PRs ]

Start here (junior) · 2

etcd-io/etcd2/10

[release-3.7] Bump Go to 1.26.6

This PR demonstrates how to update the Go toolchain version across a multi-module Go project to address CI and security tool requirements.

juniordependency-managementbuild-systems

etcd-io/etcd1/10

[release-3.7] Bump go 1.26.7

This PR teaches how to update the Go toolchain version across a multi-module repository for dependency management.

juniordependency-management

Next (mid) · 5

nestjs/nest8/10

fix(core): share existing singleton providers with lazily loaded modules

This PR teaches how to correctly share singleton providers between eagerly and lazily loaded modules, preventing resource leaks and duplicate instantiation in a dependency injection container.

middependency-managementmemory-managementtesting-strategy

dotnet/runtime8/10

Avoid rooting cryptography through ZipArchive on browser

This PR teaches how to conditionally remove a security-related dependency for specific platforms (browser/WASM) to reduce binary size, while maintaining platform-appropriate fallbacks and ensuring that unsupported features fail clearly.

middependency-managementsecuritybackwards-compatibility

tiangolo/fastapi7/10

📝 Update `tutorial/security/oauth2-jwt/` to use `pwdlib` with Argon2 instead of `passlib`

This PR teaches how to migrate a Python project's password hashing from an outdated library (passlib/bcrypt) to a modern, secure, and future-proof alternative (pwdlib/Argon2), including code, documentation, and dependency updates.

midsecuritydependency-managementbackwards-compatibility

kubernetes/kubernetes7/10

Switch golangci plugins to compiled-in single-binary modules

This PR teaches how to refactor Go build tooling to switch from plugin-based to compiled-in module-based custom linters, improving maintainability and compatibility with future Go versions.

midbuild-systemsdependency-managementrefactoring

apache/arrow6/10

GH-46646: [dev][R] Replace linr with jarl for R linting / pre-commit check

This PR teaches how to modernize and simplify pre-commit linting for an R codebase by switching from a system-dependent linter to a standalone tool, updating CI and documentation, and handling configuration and migration issues.

midconfiguration-managementtesting-strategydependency-management

[ 02 // MUST-READ PAPERS ]

Free to read, ranked by citations.