Renovate

Automated dependency update tool that creates pull requests to keep project dependencies current across package managers and languages. Scans repositories for manifest files, detects available updates, and opens merge requests with grouped or individual changes on a configurable schedule.

Trusted by teams at Microsoft, Atlassian, Mozilla, HashiCorp, Netlify, and many others. Unlike GitHub-native Dependabot, Renovate runs across multiple Git platforms including GitHub, GitLab, Bitbucket, Azure DevOps, and Gitea. Its configuration system supports ESLint-like presets for sharing rules across projects and can auto-create replacement PRs when dependencies are deprecated.

Key capabilities:

• Multi-platform support: GitHub, GitLab, Bitbucket, Azure DevOps, AWS CodeCommit, Forgejo, Gitea
• Wide package manager coverage: npm, pip, Maven, Cargo, Go modules, Composer, Docker, Helm, Terraform, and dozens more
• Configurable scheduling and grouping to control when PRs are opened and reduce noise
• Preset-based configuration for sharing rules across repositories or teams
• Replacement PRs that migrate from deprecated packages to suggested alternatives
• Self-hosted via npm package or Docker, or hosted as Mend Renovate App

Engineering teams use it to automate security patches and version bumps without manual monitoring. Monorepo setups benefit from automatic discovery of all relevant manifest files. Open source projects rely on it for consistent dependency hygiene across multiple package ecosystems in a single repo.