Anything the design needs that is provided by a different team, vendor or system and lies outside its control, for example corporate DNS and NTP, a witness site or jumbo frames end to end. Each should be confirmed and tracked, since a dependency that may not arrive is a risk.
In the Ultra Transcenders books
Each book explains Dependency in context, with comparison tables and the common traps.
Terms in this definition
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
- CONTROL
Granting this on a securable gives all other permissions on it too, making it the most powerful SQL permission. At database scope that includes UNMASK and ALTER ANY MASK. Warehouse access through the Admin, Member or Contributor workspace roles carries it.
- DNS
The system that turns names into addresses. In Azure, private endpoints depend on private DNS zones, which are queried through 168.63.129.16.
- NTP
The Network Time Protocol, on UDP port 123, which the Windows Time service relies on. Domain members take time from the domain hierarchy, which leads up to the PDC emulator in the forest root, and that server should sync with an outside source.
- Witness
Nutanix's preferred way of handling metro failures. Decisions are automatic, split brain is avoided, and a lost site is distinguished from a broken network link.
- LSDOU
The sequence in which Group Policy is processed: the local policy first, followed by site, domain and organisational unit policies. The nearest, last-processed setting takes effect unless Enforced or Block Inheritance alters that.
- Jumbo frames
Foundation leaves these unset when imaging. They raise the MTU past the normal 1,500 bytes to as much as 9,000 for guest VMs and physical host interfaces, though the CVM keeps 1,500.
- Risk
As ISO 31000 puts it, how uncertainty affects objectives; that effect can be good or bad.
Related terms
- Allow externally sourced versions
Off unless a Feed Owner turns it on for a given package. While off, if your feed already holds that package name, versions arriving from public upstreams are refused, which guards against dependency confusion attacks.
- APM
Short for application performance monitoring, the collection of request, dependency, failure and exception telemetry that sits at the heart of Application Insights.
- DAG
Directed acyclic graph: nodes (tasks or datasets) joined by dependency edges with no loops. Lakeflow Jobs and Lakeflow pipelines execute the nodes in order of their dependencies, running as many in parallel as they can.
- Defender for Cloud DevOps security
Brings GitHub, GitLab and Azure DevOps into Defender for Cloud, showing IaC, dependency, secret and code findings side by side. Problems are caught early, yet deployments that skip the pipeline are not blocked.
- Dependabot
GitHub groups three distinct dependency features under this name: version updates that keep packages current, security updates proposing fixes in pull requests, and alerts flagging vulnerable packages.
- Dependabot alerts
Raised on all GitHub plans when a package in the dependency graph matches a reviewed advisory's known vulnerability.
- End-to-end transaction details
A view in Application Insights that draws a Gantt chart of every request, dependency call and exception making up a single transaction, across all the components being monitored.
- GitHub Code Security for Azure DevOps
A standalone GHAzDO product for Azure Repos that bundles CodeQL code scanning, dependency scanning, results imported from third-party tools and the security overview.