Renovate
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
Why people recommend it
“I love bots like Renovate and Dependabot for taking care of updating my projects' dependencies.”
“We also let renovate[bot] (similar to dependabot) merge non-major dep updates if tests pass.”
Show 2 more
“Every one of my new projects uses Renovate. Not having to worry about having to check dependencies, manually bump them, etc. is a great thing”
“We use commit hashes to pin actions, have the version as a comment (e.g # v4) and renovate will keep both up to date in the PRs.”
Caveats and dissent
No one in these comments warned against it.
Often compared with
Who recommends it in their own words
From the makers not counted in the ranking
“Before I joined Mend to work on Renovate, I wrote https://news.ycombinator.com/item?id=40011111 which goes into some ways I found Renovate better than Dependabot”
Threads where it came up
- PRoctr – doctor/triage for your renovate/dependabot PRs 1 mention
- Turn Dependabot Off 1 mention
- The first 100 days as a Renovate maintainer 1 mention
- How Dependabot Actually Works 1 mention
- Gh-actions-lockfile: generate and verify lockfiles for GitHub Actions 1 mention
- Helm 4.0 1 mention
Data: renovate.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 5
“I love bots like Renovate and Dependabot for taking care of updating my projects' dependencies.”
“We also let renovate[bot] (similar to dependabot) merge non-major dep updates if tests pass.”
“Every one of my new projects uses Renovate. Not having to worry about having to check dependencies, manually bump them, etc. is a great thing”
“We use commit hashes to pin actions, have the version as a comment (e.g # v4) and renovate will keep both up to date in the PRs.”
“I've grown sick of constant Renovate PRs against the helm charts in use”