Upgrading is not a strategy, it is an action. One that often increases risk in complex, long-lived systems. This session challenges the illusion of control created by scanners, checklists, and “just upgrade” thinking. End-of-life software is an operational constraint to be managed with engineering judgment, not a ritual to be performed.

Accomplished technical leader and developer advocate with over three decades of experience in software engineering, LJC Community Director, DevOps, developer advocacy, and security, especially cybercrime and software supply chains. Recognized international public speaker and author on software supply chain security, AI, and cybercrime legislation, with a deep background in engineering and DevOps leadership