Skip to content

Add library upgrade smoke test mapping document#48949

Draft
sharon-fdm wants to merge 2 commits into
mainfrom
worktree-lib-upgrade-smoke-tests
Draft

Add library upgrade smoke test mapping document#48949
sharon-fdm wants to merge 2 commits into
mainfrom
worktree-lib-upgrade-smoke-tests

Conversation

@sharon-fdm

@sharon-fdm sharon-fdm commented Jul 8, 2026

Copy link
Copy Markdown
Collaborator

Related issue: Relates to #48943

Closes #48943

Checklist for submitter

  • Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.
    N/A - internal handbook page, no user-visible changes.

Summary

Adds handbook/engineering/library-upgrade-smoke-tests.md -- a comprehensive inventory of all ~353 direct external dependencies across every module in the repo, organized by functional area:

  • Server + fleetctl + Orbit (go.mod) -- 182 deps across 22 categories (Cloud/AWS, HTTP, Database, Redis, MDM, Auth, SCIM, Vuln scanning, Osquery, Observability, NATS, etc.)
  • Inlined third-party code (nanomdm, nanodep, scep, goose, nvdtools, etc.) -- 8 deps
  • Goval-dictionary (OVAL vuln data) -- 20 deps
  • Tools (MCP, Terraform, CI linters, dibble, hangar, screencap, etc.) -- 27 deps
  • Frontend runtime (package.json dependencies) -- 49 deps
  • Frontend dev/build (package.json devDependencies) -- ~60 deps (grouped)

Each library entry has a Smoke tests and Risk column stubbed with TODO. The next step (tracked in #48943) is to fill in the smoke tests by analyzing import usage and mapping each library to testable surface areas.

Test plan

N/A -- documentation-only change, no code modifications.

Adds a new handbook page listing all direct external dependencies across
every module in the repo (server, fleetctl, Orbit, tools, frontend),
organized by functional area. Smoke test and risk columns are stubbed
with TODO for follow-up work in #48943.
Define concrete smoke tests and risk levels for 21 libraries across
the three highest-risk sections:

- Database/SQL (11 libs): mysql driver, sqlx, goqu, sqlmw, mysqlerr,
  mymysql, sqlite3, pq, rdsmysql, otelsql, go-sqlmock
- Redis/Caching (3 libs): redigo, redisc, go-cache
- HTTP/Routing (7 libs): go-kit, gorilla/mux, gorilla/websocket,
  sockjs-go, throttled, realclientip, netbug

Each entry includes numbered smoke test steps and a risk rating
(Critical/High/Medium/Low). Section headers include guidance notes
for reviewers.

Part of #48943.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Create library upgrade to smoke test mapping document

2 participants