How to get started with renovatebot¶
Warning
Our use of renovatebot is in an early stage. Feedback is welcome via the GitLab project.
Renovatebot is an automated process which will raise Merge Requests in your GitLab projects to keep your dependencies fresh. It is very configurable but the default configuration has been designed to fulfil the needs of a typical DevOps project.
This how-to guide covers how to opt in to having renovatebot scan your projects and what to expect.
Add your project or group to the allow list¶
Renovatebot has an allow-list of projects and groups under uis/devops it is allowed to scan. It
is preferable to add groups to this allow list but we can also add individual projects.
To add your group to the allowlist, open an
issue
in the GitLab bots deployment project using the add_group_to_allowlist template and tag
teamCloud and Developer Experience in to the issue for
their awareness.
Optionally, configure CODEOWNERS for your project¶
Renovatebot can auto-assign Merge Requests to people in your project but you need to add a CODEOWNERS file first.
Merge the on-boarding Merge Request¶
Once added to the allowlist, renovatebot will create an on-boarding Merge Request (example) which will configure your project to use the default renovatebot configuration.
Merge this Merge Request to enable renovatebot for your project.
Summary¶
In this guide you learned how to add your GitLab group to the renovatebot allowlist and to merge the on-boarding Merge Request.