What is this?
Renovate is an automated dependency update tool: it scans your repo for dependency references and opens pull requests when newer versions are available, so you don't update them by hand.
Renovate is an automated dependency update tool: it scans your repo for dependency references and opens pull requests when newer versions are available, so you don't update them by hand.Is it a hosted service, or do I run it myself?Both. It's a CLI tool you can run yourself, Mend hosts it as a cloud app for GitHub.com and Bitbucket Cloud, and it can also run as a CI job via a GitHub Action or GitLab Runner.
Both. It's a CLI tool you can run yourself, Mend hosts it as a cloud app for GitHub.com and Bitbucket Cloud, and it can also run as a CI job via a GitHub Action or GitLab Runner.How do I get it updating my repos?Easiest path: install the Renovate Cloud-Hosted App on your GitHub org and select the repos to enable. Alternatives: the GitHub Action or GitLab Runner in CI, or a custom pipeline that runs npx renovate.
Easiest path: install the Renovate Cloud-Hosted App on your GitHub org and select the repos to enable. Alternatives: the GitHub Action or GitLab Runner in CI, or a custom pipeline that runs npx renovate.What do I need before it can run?The cloud app needs no setup at all. The CLI and CI options run via npx renovate on Node and need access to your git platform and package registries, private ones included.
The cloud app needs no setup at all. The CLI and CI options run via npx renovate on Node and need access to your git platform and package registries, private ones included.Is support equally solid on all those platforms?No — AWS Code Commit, Gerrit and SCM-Manager are experimental, and the Azure DevOps 'Renovate Me' extension is community-maintained, so its support requests aren't handled in the main Renovate repo.
No — AWS Code Commit, Gerrit and SCM-Manager are experimental, and the Azure DevOps 'Renovate Me' extension is community-maintained, so its support requests aren't handled in the main Renovate repo.Which code platforms does it work with?GitHub, GitLab, Bitbucket, Azure DevOps, Gitea and Forgejo, plus experimental support for AWS Code Commit, Gerrit and SCM-Manager. The CLI itself runs on all platforms.
GitHub, GitLab, Bitbucket, Azure DevOps, Gitea and Forgejo, plus experimental support for AWS Code Commit, Gerrit and SCM-Manager. The CLI itself runs on all platforms.Can I host it on my own server?Yes. Mend Renovate Community Self-Hosted is free to install on your own server and can reach internal packages; Enterprise is the paid plan for the self-hosted route.
Yes. Mend Renovate Community Self-Hosted is free to install on your own server and can reach internal packages; Enterprise is the paid plan for the self-hosted route.Will it be reading my private repos?Yes — it looks for dependency references in both public and private repos and connects to private package registries, so it needs read access to your code.
Yes — it looks for dependency references in both public and private repos and connects to private package registries, so it needs read access to your code.Is it only for npm and JavaScript projects?No — it covers most popular ecosystems, including npm, Java, Python, .NET, Scala, Ruby, Go and Docker, with support for over 90 package managers.
No — it covers most popular ecosystems, including npm, Java, Python, .NET, Scala, Ruby, Go and Docker, with support for over 90 package managers.Do I have to point it at my dependency files?No — Renovate discovers the relevant package files in your repo automatically and delivers the update PRs straight to the repo.
No — Renovate discovers the relevant package files in your repo automatically and delivers the update PRs straight to the repo.How does it help me decide which updates to accept?Each PR comes with Merge Confidence signals — the update's age, adoption and pass rates — so you can judge how safe an update is before merging it.
Each PR comes with Merge Confidence signals — the update's age, adoption and pass rates — so you can judge how safe an update is before merging it.What are similar projects?gitea, gitlabhq, patch-package, composer, homebrew-core, runner-images, npm-check-updates, verdaccio
gitea, gitlabhq, patch-package, composer, homebrew-core, runner-images, npm-check-updates, verdaccioWhich topics is it in?dependencies, gitlab, package-management, dependency-manager, version-control, ci-cd, agplv3, package-manager, github, ci, developers, devops
dependencies, gitlab, package-management, dependency-manager, version-control, ci-cd, agplv3, package-manager, github, ci, developers, devops