How to Automate Dependency Updates with the Renovate@Roche Bot

on YouTube ↗45m

" summary

Roche runs a self-hosted Renovate Docker image that scans project lists, creates onboarding merge requests, and updates dependencies via GitLab CI scheduled every 2 hours. Configuration lives in renovate.json and server-side host rules; a GitHub token fetches release notes. The instance parallelizes work with 12 jobs in parallel, enforces assignees to prevent ignored MRs, and can auto-merge when CI is green. It succeeds at bulk maintenance but requires admin tuning (host credentials, PR limits, ignored versions) to avoid failing updates like a Python 3.12 break.

AI-written summary · about

" chapters (12)

1. 0:00Automating dependency updates
2. 3:54What is Renovate
3. 7:07Renovate with Docker & GitLab
4. 11:20Self-hosted GitLab config
5. 15:54First Renovate merge request
6. 21:38Custom config per project
7. 26:18Merge requests & auto-merging
8. 31:56Failed updates & ignored versions
9. 34:00Renovate community tips
10. 37:11Key takeaways
11. 42:33Final demo & closing
12. 42:53Q&A

" related talks

• 45mHow to Automate Dependency Updates with the Renovate@Roche BotMarek Grzenkowicz · DevDays Europe 2024
• 33mUsing Renovate to keep your version dependencies updatedChristian Hörl · ContainerDays 2022
• 33mAutomated update management withSebastian Gumprich · Open Source Monitoring Conference 2023
• 31mRenovate/Dependabot: How to Take Back Control of Dependency UpdatesJean-Philippe Baconnais, Lise Quesnel · Devoxx France 2024
• 16mRenovate to the RescuePaul Vulliemin · DevFest Toulouse 2025
• 41mRenovate/Dependabot: How to Reclaim Control Over Dependency UpdatesLise Quesnel · DevFest Lille 2024
• 25mRenovate, or how to keep your project up to date!Valentin Maerten · Voxxed Days Luxembourg 2024
• 33mKeep your dependencies in checkMarit van Dijk · J-Fall 2022