Recent Articles - Renovate
Pin Your GitHub Actions to Protect Against Mutability
Aug 23, 2025 · 5 min read
Pinning third-party GitHub Actions to a commit SHA helps protect you against supply chain attacks.
Keep Lerna Monorepos Updated with Renovate
Nov 4, 2023 · 9 min read
Keeping dependencies up to date is important for every codebase, and there are a few strategies for Lerna monorepos.
Keep Docker Base Images Updated with Renovate
Jul 30, 2020 · 6 min read
Just like with libraries used in code, keeping your Docker base images up to date is a good security practice.
Keep npm Packages Updated with Renovate
Jul 19, 2020 · 5 min read
It's important to keep your npm packages updated for security reasons, and it's really easy to do automatically with Renovate.