Why do we need to update dependencies?

• bug fixes
• security patches
• new features and optimizations

Why do we need to automate the process?

• increasing number of projects
• different languages and tools (package.json, requirements.txt, Pipfile)
• time consuming and needs to be scheduled

Available solutions

• Dependabot
• Renovatebot
• (multiple others)

How do they work (Github Apps)?

https://github.com/marketplace/dependabot-preview

https://github.com/marketplace/renovate

Available configuration (Renovate)?

https://docs.renovatebot.com/configuration-options/

How to use them?

• Hosted solution (usually with paid plan available)

And when Open Source:

• Self hosted
• Docker runner

Gitlab integration with Renovate

https://violoncello.ch/blog/2019/11/automated-dependency-updates-with-renovate-bot-integrated-into-gitlab-ci

Thank You