WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2026 Europe • Jul 10, 2026 • Session details

Automate or Stagnate: Keep Your Dependencies up to date with Renovate

Susanne Bach Ladefoged Hou

Delaying updates increases subsequent upgrade time by 60% per missed major version. Escape dependency hell and learn to safely automate your pipelines with Renovate.

Pause
Mute Enter Fullscreen
#1 about 5 min

Why prioritizing continuous software dependency management matters

The challenges of managing dependencies across thousands of repositories and how regular updates reduce compounding technical debt.

#2 about 2 min

Understanding package managers and complex dependency graphs

How package managers handle nested libraries and the risks hiding deep within the dependency tree.

#3 about 2 min

Choosing tools for automated software dependency management

Evaluating automation tools like Dependabot and Renovate based on organizational needs and multiplatform support capabilities.

#4 about 2 min

Crucial considerations before automating software dependency updates

Why defining pull request ownership and iterating on configurations is critical for establishing successful automation workflows.

#5 about 4 min

Executing phased rollout strategies for dependency updates

How to safely scale automation across organizations by phasing rollouts via specific dependency subsets or canary repositories.

#6 about 2 min

Gating automated updates by semantic versioning risks

Limiting automated updates to patch versions or known vulnerabilities to minimize the risk of introducing breaking changes.

#7 about 3 min

Augmenting dependency management workflows with artificial intelligence

Leveraging AI agents to automatically fix broken tests, interpret changelogs, and proactively scan for suspicious dependency releases.

#8 about 2 min

Identifying scenarios where dependency automation becomes impractical

Recognizing environments with heavy compliance, insufficient test coverage, or legacy systems that hinder automated dependency updates.

#9 about 2 min

Controlling pull request volume to prevent developer fatigue

Strategies for capping open pull requests, widening groupings, and scheduling updates to avoid overwhelming engineering teams.

#10 about 1 min

Structuring and separating configuration files for scale

How separating package rule configurations by concern improves readability and debugging across large organizational implementations.

#11 about 3 min

Managing faulty packages with automated rollback pull requests

Using specific configuration rules to automatically revert broken dependencies when runtime bugs are discovered across multiple repositories.

#12 about 3 min

Reviewing real-world configurations and handling untested repositories

Finding configuration inspiration from open-source projects and using canary repositories to test software updates in untested environments.

Matching moments

1:17 min

Automating package dependency updates with scanning algorithms

Dennis Doomen Dennis Doomen · World Congress 2025

1:41 min

Elevating developer workflows by automating repetitive foundational tasks

2:49 min

Managing dependency vulnerabilities and transitive software risks

Niels Tanis Niels Tanis · World Congress 2024

2:22 min

Automating library updates and vulnerability alerts with Dependabot

Kevin Lewis Kevin Lewis · World Congress 2025

1:34 min

Refactoring bloated legacy outputs and managing aggressive dependency creep

Sergej Reznik Sergej Reznik · Europe 2026 Virtual

5:47 min

Automating dependency updates and daily organizational tasks

Christopher Harrison Christopher Harrison · World Congress 2026 North America

More from World Congress 2026 Europe

Building the Nervous System of AI - Michael Kagan (NVIDIA) thumbnail
29:17
3 months ago

Building the Nervous System of AI - Michael Kagan (NVIDIA)

Michael Kagan, Sead Ahmetović

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote thumbnail
19:41
3 months ago

Five Things in Tech that Matter Now - WeAreDevelopers World Congress 2026 Closing Keynote

Christian Heilmann

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend thumbnail
32:06
3 months ago

The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend

David vonThenen

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes thumbnail
35:13
3 months ago

Super scaling for the Super Bowl: How to survive 30 million users hitting your backend in 30 minutes

Irina Branovic

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬 thumbnail
24:23
3 months ago

Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬

Jeremy Murray

Angstfreude - AI and Corporate Culture - The Thrill and the Threat thumbnail
30:26
3 months ago

Angstfreude - AI and Corporate Culture - The Thrill and the Threat

Axel Ebert, Karin Krobath

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Prompt Debt: Why Your AI System Is Frozen in Time

  • Suriya Prakash B

    Red Hat

    Principal Software Engineer

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Open session

How is SWE & EM roles are changing in the age of AI

  • Amol Sharma

    Stripe

    Engineering Manager

Open session

Teaching AI Coding Agents to Build It Right the First Time

  • Sajeetharan Sinnathurai

    Microsoft

    Principal Product Manager

Related videos

Confessions of a Software Archaeologist: What I Did Wrong in 10 Years of Restructuring Software thumbnail
27:50
World Congress 2026 Europe • 3 months ago

Confessions of a Software Archaeologist: What I Did Wrong in 10 Years of Restructuring Software

Hendrik Lösch

Real-World Security for Busy Developers thumbnail
29:50
World Congress 2025 • about 1 year ago

Real-World Security for Busy Developers

Kevin Lewis

Shipping Quality Software In Hostile Environments thumbnail
43:00
World Congress 2021 • over 5 years ago

Shipping Quality Software In Hostile Environments

Luka Kladaric

Get ready for new features - the legacy challenge thumbnail
58:52
LIVE • almost 3 years ago

Get ready for new features - the legacy challenge

Hans Hosea Schäfer

Practical tips for keeping your C# code base clean thumbnail
22:48
World Congress 2026 Europe • 3 months ago

Practical tips for keeping your C# code base clean

Dennis Doomen

Old tools, new tricks thumbnail
33:28
Europe 2026 Virtual • 4 months ago

Old tools, new tricks

Benjamin Bischoff

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.