About

Imported from terminalskills/skills (skills/renovate/SKILL.md). Install upstream with npx skills add terminalskills/skills --skill renovate. Copyright stays with the author (Apache-2.0).

Renovate

Name: renovate
Author: terminalskills

Overview

Renovate is an automated dependency update tool that scans repositories for dependency files across 50+ ecosystems (npm, pip, Docker, Go, Rust, Terraform, GitHub Actions) and creates pull requests with changelogs, release notes, and configurable automerge policies. It supports grouping, scheduling, and per-package rules to keep dependencies current without overwhelming teams.

Instructions

When setting up Renovate, start with config:recommended which provides sensible defaults for grouping, scheduling, and automerge, then add renovate.json to the repo root.
When configuring automerge, enable it for low-risk updates (@types/*, devDependencies patches) and disable it for major updates, using platformAutomerge for GitHub's native merge feature.
When reducing PR noise, use group:allNonMajor for a single weekly PR covering all minor and patch updates, and group monorepo packages (React, Angular, Babel) together.
When setting schedules, configure update windows for low-traffic times (e.g., ["after 9am and before 5pm every weekday"]) to avoid disrupting developers.
When defining package rules, use matchPackageNames, matchPackagePatterns, and matchUpdateTypes to set per-package automerge, grouping, and version strategies.
When handling version strategies, pin exact versions in applications for reproducibility and use ranges in libraries for compatibility.

Examples

Example 1: Configure Renovate for a production monorepo

User request: "Set up Renovate with automerge for safe updates and weekly batching"

Actions:

Create renovate.json extending config:recommended and schedule:weekly
Add package rules to automerge @types/* and devDependency patches
Group React, Next.js, and testing library packages into single PRs
Enable the dashboard issue for an overview of all pending updates

Output: A Renovate configuration that automerges safe updates, batches non-major changes weekly, and groups related packages.

Example 2: Manage Docker and Terraform dependency updates

User request: "Keep Docker base images and Terraform provider versions up to date"

Actions:

Configure Renovate to scan Dockerfiles and .tf files
Set matchDatasources: ["docker"] with automerge: false for base image updates
Group Terraform providers by cloud provider (AWS, GCP, Azure)
Enable vulnerability alerts to prioritize updates that fix known CVEs

Output: Automated PRs for Docker and Terraform dependency updates with grouped providers and security prioritization.

Guidelines

Start with config:recommended since it handles grouping, scheduling, and automerge sensibly.
Automerge @types/* and devDependencies patches since they are low-risk and high-volume.
Group monorepo packages (React, Vue, Angular, Babel, Jest) into single PRs to reduce noise.
Schedule updates for low-traffic times to avoid disrupting developers during peak hours.
Pin exact versions in applications and use ranges in libraries.
Review major updates manually since breaking changes require human judgment.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/terminalskills-skills-renovate/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

terminalskills-skills-renovate.ocm.jsonjson

{
  "ocm": "1",
  "id": "terminalskills-skills-renovate",
  "kind": "skill",
  "name": "renovate",
  "description": "Assists with automating dependency updates across JavaScript, Python, Docker, Go, Rust, Terraform, and 50+ ecosystems using Renovate. Use when configuring update strategies, automerge policies, grouping rules, or scheduling to keep dependencies current. Trigger words: renovate, dependency updates, automerge, package rules, dependency management.",
  "publisher": "terminalskills",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding",
      "math"
    ],
    "tags": [
      "skill-md",
      "renovate",
      "dependencies",
      "automation",
      "security",
      "devops",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Assists with automating dependency updates across JavaScript, Python, Docker, Go, Rust, Terraform, and 50+ ecosystems using Renovate. Use when configuring update strategies, automerge policies, grouping rules, or scheduling to keep dependencies current. Trigger words: renovate, dependency updates, automerge, package rules, dependency management."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/terminalskills/skills",
      "path": "skills/renovate/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/terminalskills/skills/blob/HEAD/skills/renovate/SKILL.md",
      "key": "terminalskills/skills/skills/renovate/SKILL.md"
    },
    "compatibility": "No special requirements",
    "license": "Apache-2.0"
  },
  "instructions": "# Renovate\n\n## Overview\n\nRenovate is an automated dependency update tool that scans repositories for dependency files across 50+ ecosystems (npm, pip, Docker, Go, Rust, Terraform, GitHub Actions) and creates pull requests with changelogs, release notes, and configurable automerge policies. It supports grouping, scheduling, and per-package rules to keep dependencies current without overwhelming teams.\n\n## Instructions\n\n- When setting up Renovate, start with `config:recommended` which provides sensible defaults for grouping, scheduling, and automerge, then add `renovate.json` to the repo root.\n-",
  "cost": {
    "context_tokens": 782
  }
}

Fetch it by URL: GET /api/v1/registry/terminalskills-skills-renovate/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.