Renovate/Dependabot: How to Reclaim Control Over Dependency Updates
summary
Overview of Dependabot and Renovate for automating dependency updates, showing how these tools create pull/merge requests to upgrade project dependencies. Presents practical setup advice and lessons learned from open-source and consulting experience (including mistakes), and includes a demo focused on configuring Renovate and assessing the tools' benefits for real projects.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:45Why update dependencies
- 5:15Dependabot vs Renovate
- 7:44Renovate basics
- 10:31Renovate demo on GitLab
- 12:38Renovate config customization
- 14:26Renovate presets
- 16:12Grouping updates
- 17:16Dependency dashboard
- 20:47Auto-assign MRs in GitLab
- 22:12Best practices
- 25:00CI/CD runner load
- 27:26Cost and eco impact
- 28:50Validate Renovate configs
- 31:16Automerge dependencies
- 33:45Advanced automation
- 36:54Renovate updates itself
- 40:49Conclusion
related talks
31mRenovate/Dependabot: How to Take Back Control of Dependency Updates
45mHow to Automate Dependency Updates with the Renovate@Roche Bot- 45mHow to Automate Dependency Updates with the Renovate@Roche Bot
16mRenovate to the Rescue
36mThe future of dependency management, seen from 2022
33mUsing Renovate to keep your version dependencies updated
24mManaging Dependencies with Confidence
47mTales from the Dev Side: What Went Wrong, What We Fixe & What You Can Steal