1
1
## Motivation
2
2
3
- ![ ] ( 170_supply_chain_security/renovate/dependencies_stability_features .drawio.svg ) <!-- .element: style="float: right; width: 40%;" -->
3
+ ![ ] ( 170_supply_chain_security/renovate/forces .drawio.svg ) <!-- .element: style="float: right; width: 40%;" -->
4
4
5
5
Dependencies add reusable components
6
6
@@ -222,13 +222,13 @@ Filter log for errors / failures for...
222
222
- Permission issues
223
223
- Rate limits
224
224
225
- XXX open PRs
225
+ Check for failed pipelines
226
226
227
- ### Up-to-dateness
227
+ Check for failed automerges
228
228
229
- Failures will show in the log
229
+ ### Up-to-dateness / Security
230
230
231
- ### Security
231
+ Failures will show in the log
232
232
233
233
Create and analyze SBOM
234
234
@@ -287,9 +287,7 @@ Supported ecosystems: Go, JavaScript, Java, Python, .NET, PHP, Ruby
287
287
288
288
Show updates addressing security alerts [ ] ( https://docs.renovatebot.com/configuration-options/#vulnerabilityalerts )
289
289
290
- Integrates with GitHub and Dependabot
291
-
292
- XXX new feature... open issue?
290
+ Requires GitHub and Dependabot
293
291
294
292
### Requirements
295
293
@@ -301,9 +299,21 @@ Enable alert from Dependabot [](https://docs.github.com/en/repositories/managing
301
299
302
300
## Testing the Renovate configuration
303
301
304
- XXX isolate change in separate repo
302
+ Configuration changes * will* break Renovate
303
+
304
+ ### Isolate the change
305
+
306
+ Factor out the change
305
307
306
- XXX ` --platform=local `
308
+ Test in a separate repository
309
+
310
+ (Optionally) run Renovate manually for speed
311
+
312
+ ### Test locally
313
+
314
+ Do not commit changes
315
+
316
+ Run Renovate locally using ` --platform=local `
307
317
308
318
---
309
319
@@ -327,8 +337,6 @@ Detailed comparison [](https://docs.renovatebot.com/bot-comparison/)
327
337
328
338
## Case study: uniget
329
339
330
- XXX improve value proposition
331
-
332
340
### Installer and updater for (container) tools
333
341
334
342
Checkout uniget.dev [ ] ( https://uniget.dev )
0 commit comments