What does HackerNews think of renovate?

Universal dependency update tool that fits into your workflows.

Language: TypeScript

#70 in Hacktoberfest
#1 in npm
There are at least two other hugely important use cases you missed:

- automatic security / vendoring updates (e.g. https://github.com/renovatebot/renovate)

- automated cross-repo syncs, e.g. Google has processes and tools that bidirectionally sync pieces of Google3 with GitHub repos

Honestly dependabot is so bad I'm surprised anything other than the smallest projects use it, broken upgrades, lack of configurability, no multi-update PRs etc... and it only runs on GitHub.

I now recommend Renovate to clients which is also free, but a lot smarter.

https://github.com/renovatebot/renovate

https://renovatebot.com/

If you want an alternative to Dependabot, try Renovate [0].

[0]: https://github.com/renovatebot/renovate

This looks really cool. How dos it compare to say [renovate?](https://github.com/renovatebot/renovate)

I look forward to trying this with gitea to automatically create pull requests to update ansible plays with the latest version of software.

I used to do this before I discovered renovate [1] - now we spend time working on major upgrades but minor are generally automatic (assuming they pass tests)

[1]: https://github.com/renovatebot/renovate

You could use renovate [1] to watch your repository and open pr for you when there is a new version. I don't know if it supports watching debian repositories out of the box, but that's probably doable with some tweaking

[1] https://github.com/renovatebot/renovate