WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 10, 2026 • Session details

Automate or Stagnate: Keep Your Dependencies up to date with Renovate

Susanne Bach Ladefoged Hou

Delaying updates increases subsequent upgrade time by 60% per missed major version. Escape dependency hell and learn to safely automate your pipelines with Renovate.

Pause
Mute Enter Fullscreen
#1 about 5 min

Why prioritizing continuous software dependency management matters

The challenges of managing dependencies across thousands of repositories and how regular updates reduce compounding technical debt.

#2 about 2 min

Understanding package managers and complex dependency graphs

How package managers handle nested libraries and the risks hiding deep within the dependency tree.

#3 about 2 min

Choosing tools for automated software dependency management

Evaluating automation tools like Dependabot and Renovate based on organizational needs and multiplatform support capabilities.

#4 about 2 min

Crucial considerations before automating software dependency updates

Why defining pull request ownership and iterating on configurations is critical for establishing successful automation workflows.

#5 about 4 min

Executing phased rollout strategies for dependency updates

How to safely scale automation across organizations by phasing rollouts via specific dependency subsets or canary repositories.

#6 about 2 min

Gating automated updates by semantic versioning risks

Limiting automated updates to patch versions or known vulnerabilities to minimize the risk of introducing breaking changes.

#7 about 3 min

Augmenting dependency management workflows with artificial intelligence

Leveraging AI agents to automatically fix broken tests, interpret changelogs, and proactively scan for suspicious dependency releases.

#8 about 2 min

Identifying scenarios where dependency automation becomes impractical

Recognizing environments with heavy compliance, insufficient test coverage, or legacy systems that hinder automated dependency updates.

#9 about 2 min

Controlling pull request volume to prevent developer fatigue

Strategies for capping open pull requests, widening groupings, and scheduling updates to avoid overwhelming engineering teams.

#10 about 1 min

Structuring and separating configuration files for scale

How separating package rule configurations by concern improves readability and debugging across large organizational implementations.

#11 about 3 min

Managing faulty packages with automated rollback pull requests

Using specific configuration rules to automatically revert broken dependencies when runtime bugs are discovered across multiple repositories.

#12 about 3 min

Reviewing real-world configurations and handling untested repositories

Finding configuration inspiration from open-source projects and using canary repositories to test software updates in untested environments.

Matching moments

1:17 min

Automating package dependency updates with scanning algorithms

Dennis Doomen Dennis Doomen · WWC 2025

1:41 min

Elevating developer workflows by automating repetitive foundational tasks

2:49 min

Managing dependency vulnerabilities and transitive software risks

Niels Tanis Niels Tanis · WWC 2024

2:22 min

Automating library updates and vulnerability alerts with Dependabot

Kevin Lewis Kevin Lewis · WWC 2025

1:34 min

Refactoring bloated legacy outputs and managing aggressive dependency creep

Sergej Reznik Sergej Reznik · Europe 2026 Virtual

1:00 min

Encouraging broader team adoption of security automation practices

Ramona Schwering Ramona Schwering · WWC 2024

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
about 1 month ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
about 1 month ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
about 1 month ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
about 1 month ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
about 1 month ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
about 1 month ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Merging at Scale: From Broken Builds to Green Mainline

Manjari Akella, Preetam Dwivedi

Manjari Akella
Preetam Dwivedi
Open session

World Congress 2026 North America

Agentic Drift: keeping pace with your agents

John Coghlan

Senior Director, Developer Advocacy at GitLab

John Coghlan
Open session

World Congress 2026 North America

The Broken Rung: How AI is Rebuilding Software Development from the Ground Up

Tomislav Tipurić

Chief Technology Officer, Nephos

Tomislav Tipurić
Open session

World Congress 2026 North America

When Humans Stop Writing Code: Rethinking Languages, Compilers, and Responsibility

Simon Auer

Organizer of flutter vienna meetup and CEO of marqably

Simon Auer
Open session

World Congress 2026 North America

From Static Rules to Reasoning Platforms: Scaling Intelligent Canary Delivery in 2026

Daniel Oh

Senior Principal Developer Advocate

Daniel Oh
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy

Related videos

Confessions of a Software Archaeologist: What I Did Wrong in 10 Years of Restructuring Software thumbnail
27:50
WWC Europe 2026 • about 1 month ago

Confessions of a Software Archaeologist: What I Did Wrong in 10 Years of Restructuring Software

Hendrik Lösch

Real-World Security for Busy Developers thumbnail
29:50
WWC 2025 • 12 months ago

Real-World Security for Busy Developers

Kevin Lewis

Shipping Quality Software In Hostile Environments thumbnail
43:00
WWC 2021 • about 5 years ago

Shipping Quality Software In Hostile Environments

Luka Kladaric

Practical tips for keeping your C# code base clean thumbnail
22:48
WWC Europe 2026 • about 1 month ago

Practical tips for keeping your C# code base clean

Dennis Doomen

Old tools, new tricks thumbnail
33:28
Europe 2026 Virtual • about 1 month ago

Old tools, new tricks

Benjamin Bischoff

From boy scouting to redrawing the landscape thumbnail
30:01
WWC 2024 • almost 2 years ago

From boy scouting to redrawing the landscape

timtebeek

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.