Skip to content

ZEP-0010: Vendoring external dependencies#11

Open
soltysh wants to merge 2 commits intozarf-dev:mainfrom
soltysh:vendor
Open

ZEP-0010: Vendoring external dependencies#11
soltysh wants to merge 2 commits intozarf-dev:mainfrom
soltysh:vendor

Conversation

@soltysh
Copy link
Copy Markdown
Contributor

@soltysh soltysh commented Jan 10, 2025

Comment thread 10-vendor-dependencies/README.md Outdated
Vendoring adds to repository's size. However, disk space is inexpensive, and many
large projects (eg. [Kubernetes](https://github.com/kubernetes/kubernetes/), with
a `vendor/` directory ~70MB) have benefited from improving their dependency management.
For Zarf, vendoring would increase the repository size by approximately 410MB.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would be interested to see the cost of a vendor folder storage on the .git folder. I'm not sure if there is an easy way to calculate that. The Kubernetes .git folder is ~1.2 GBs. There have surely been a lot of changes in Kubernetes itself, but I wonder how much of .git folder is from vendor diffs.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I did some research on the topic, but it's hard to clearly identify what the increase will be, since it will depend on the amount and size of changes over time. Because the history is the biggest contributor to the overall size of .git/ directory. I've added wording explicitly covering that dir.

Comment thread 10-vendor-dependencies/README.md Outdated
3. **Faster CI/CD Builds Times.**

Local dependencies eliminate the need to fetch external dependencies, speeding
up builds.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is especially nice for Windows builds, where github actions caching doesn't work, so pulling all the Zarf dependencies for unit tests takes about 10 minutes

@soltysh soltysh changed the title ZEP-10: Vendoring external dependencies ZEP-0010: Vendoring external dependencies Jan 10, 2025
@brandtkeller brandtkeller moved this to Triage in Zarf Oct 24, 2025
soltysh added 2 commits April 15, 2026 13:42
Signed-off-by: Maciej Szulik <maciej@defenseunicorns.com>
Signed-off-by: Maciej Szulik <maciej@defenseunicorns.com>
Comment on lines +9 to +14
reviewers:
- "@daveworth"
- "@schristoff"
approvers:
- "@daveworth"
- "@schristoff"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
reviewers:
- "@daveworth"
- "@schristoff"
approvers:
- "@daveworth"
- "@schristoff"
reviewers:
- "@daveworth"
- "@zarf-dev/maintainers"
approvers:
- "@daveworth"
- "@zarf-dev/maintainers"

Copy link
Copy Markdown
Member

@AustinAbro321 AustinAbro321 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

zep.yaml needs a few updates. Strategy wise this looks good to me

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should update the title and milestone versions here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Triage

Development

Successfully merging this pull request may close these issues.

3 participants