Repolode
Submit
renovatebot

renovatebot/renovate

Automated dependency update tool that scans repos for outdated packages and opens pull requests to upgrade them.

Open-source alternative to:Dependabot

View on GitHubWebsite
Stars
22,845
Forks
3,387
Open issues
1,499
Last commit
2 hours ago

What is it?

Renovate finds references to dependencies, both public and private, in your code and checks whether newer versions exist. When updates are available, it creates pull requests in your repository so you can review and merge them instead of updating each package by hand.

It supports more than 90 package managers, including npm, Java, Python, .NET, Scala, Ruby, Go and Docker, and works with GitHub, GitLab, Bitbucket, Azure DevOps, Gitea and Forgejo. Update PRs can include details such as package age, adoption and merge confidence to help decide which changes to accept. Behavior is controlled through configuration files that fit the repository's own standards.

Renovate can run as a hosted app on GitHub or Bitbucket Cloud, as a self-hosted server, as a GitHub Action or GitLab Runner job, or directly through the CLI with npx.

Key features

  • 01Scans repositories for dependency references and detects newer versions.
  • 02Opens update pull requests automatically in the target repo.
  • 03Covers more than 90 package managers across many languages.
  • 04Connects to private repositories and package registries.
  • 05Shows package age, adoption and merge confidence to inform update decisions.
  • 06Configurable per repository through config files.

Use cases

  • Keeping npm, Maven or Python dependencies current across many repositories.
  • Automating Docker image tag updates in deployment manifests.
  • Reviewing dependency upgrades in batches through pull requests instead of manual checks.
  • Running dependency updates on a self-hosted GitLab or Bitbucket Data Center instance.

Quick start

  1. 1

    Run the Renovate CLI directly with npx

    npx renovate
  2. 2

    See the Running Renovate docs for all other ways to run it

Things to know

  • Licensed under AGPL-3.0, a copyleft license that may restrict some commercial uses.
  • Some platforms such as AWS CodeCommit, Gerrit and SCM-Manager are marked experimental.
  • Hosting it yourself requires setting up a scheduled job or pipeline, and the cloud-hosted option is limited to GitHub.com and Bitbucket Cloud.

In collections

Testing frameworks & test automation tools

Topics

#dependency-management#automation#package-manager#pull-request#npm#docker#ci-cd#azure-devops#bitbucket#dependencies

FAQ

What is renovate?
Automated dependency update tool that scans repos for outdated packages and opens pull requests to upgrade them. Renovate finds references to dependencies, both public and private, in your code and checks whether newer versions exist. When updates are available, it creates pull requests in your repository so you can review and merge them instead of updating each package by hand.
Is renovate free to use? What license does it have?
renovate is open source under the AGPL-3.0 license. Check the license terms before using it in commercial products.
Is renovate still maintained?
Actively maintained. The last commit to renovate was on Oct 22, 2026.
What can I use renovate for?
Keeping npm, Maven or Python dependencies current across many repositories. Automating Docker image tag updates in deployment manifests. Reviewing dependency upgrades in batches through pull requests instead of manual checks. Running dependency updates on a self-hosted GitLab or Bitbucket Data Center instance.
How do I install renovate?
Run the Renovate CLI directly with npx: npx renovate See the Running Renovate docs for all other ways to run it
Where can I get renovate?
The source code and installation instructions are on GitHub: https://github.com/renovatebot/renovate

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects