Policy for pulling updated versions of dependencies

[tapickell]

Policy for pulling updated versions of dependencies so when a new version is released then we should have something to say "Hey I can be updated if I pass validation".

[berniedurfee-ge]

Might be out of scope. The pipeline that pushes new versions should control the validation and approval of new cookbooks. Now, one thing to make this possible might be to allow cookbook inventory to live in a DB, instead of a flat file. This way something else, like a validation pipeline could push new cookbooks without having to update a flat file. The DB becomes and integration point.