renovate
Renovate
Overview
Renovate is an automated dependency update tool. It scans a repository for dependency files (version 44 ships 117 managers, among them npm, pip, Docker, Go modules, Cargo, Terraform and GitHub Actions) and opens pull requests with changelogs and release notes. A renovate.json in the repository decides which updates arrive, when, how they are grouped and which ones may merge themselves. Renovate runs either as the hosted Mend Renovate app or self-hosted from the renovate npm package, Docker image or GitHub Action.
Instructions
Put Renovate on a repository
- Hosted, GitHub: install the Mend Renovate app (
https://github.com/apps/renovate) on selected repositories. Renovate opens an onboarding PR titled "Configure Renovate" that addsrenovate.json; no update PR is created until it is merged. - Self-hosted: see "Self-host Renovate" below.
The config file is looked up in this order: renovate.json, renovate.jsonc, renovate.json5, then the same names under .github/ and .gitlab/, then .renovaterc and .renovaterc.json (also .jsonc, .json5). Config in package.json is deprecated. Renovate always reads the file on the default branch.