The invention relates to a
software dependency upgrading method and device,
computer equipment, a storage medium and a product, and belongs to the technical field of
software. The method comprises the steps of obtaining a dynamically updated
relational knowledge graph, extracting a corresponding project knowledge sub-graph from the
relational knowledge graph based on dependency configuration of a target
software project, performing risk analysis on the project knowledge sub-graph by using a
graph model, and predicting a risk propagation path of the target software project. The risk propagation path comprises at least one of a
vulnerability propagation path and a compatibility fracture path, and generating at least one dependency upgrading strategy for the risk propagation path through a multi-objective optimization
algorithm, the optimization objectives of the multi-objective optimization
algorithm comprise at least two of the following objectives: minimizing the security risk, maximizing the compatibility confidence and minimizing the upgrading cost; and performing dependency upgrading on the target software
project based on the at least one dependency upgrading strategy. Through the method, the
automation level, the safety and the
overall efficiency of dependency management can be improved.