6 comments

  • c0balt2 hours ago
    It is nice to see more work on renovate but your comparison, especially the points on filtering, license keys and discovery, seems misleading for at least GitLab.<p>Both work with mend&#x27;s renovate WITHOUT a license key, see also <a href="https:&#x2F;&#x2F;gitlab.com&#x2F;renovate-bot&#x2F;renovate-runner" rel="nofollow">https:&#x2F;&#x2F;gitlab.com&#x2F;renovate-bot&#x2F;renovate-runner</a>. As it is just a scheduled pipeline then you can also adjust frequency, timeouts and more.
    • jamietanna1 hour ago
      I think the confusion is also because it&#x27;s a comparison of Community Self-Hosted (CE) vs the pure Open Source CLI - the latter is what works without license key<p>I&#x27;ll see if I can help with clarifying this in the table!<p>(I&#x27;m a Renovate maintainer and employee at Mend)
  • rirze4 hours ago
    I&#x27;m struggling to see how this operator helps-- is there some scenario that I cannot imagine that others are dealing with where this operator is useful? Specifically, what problems does this solve?
    • baby_souffle3 hours ago
      Renovate lets you configure most things in each repos individual config file.<p>I can only imagine a set of intersecting edge cases where operator pattern is the most logical solution…<p>Edit: good answers here. <a href="https:&#x2F;&#x2F;old.reddit.com&#x2F;r&#x2F;kubernetes&#x2F;comments&#x2F;1r1u7um&#x2F;renovate_the_kubernetesnative_way&#x2F;o4sa061&#x2F;" rel="nofollow">https:&#x2F;&#x2F;old.reddit.com&#x2F;r&#x2F;kubernetes&#x2F;comments&#x2F;1r1u7um&#x2F;renovat...</a>
      • rirze3 hours ago
        So... helm without helm?
    • JanLepsky3 hours ago
      There&#x27;s several benefits we had in mind when building this (after using self-hosted Renovate ourselves): k8s-native approach: It uses CRDs, so that Renovate configs are Kubernetes resources. You can manage them more easily&#x2F;granular with Argo&#x2F;Flux&#x2F;kubectl as part of existing workflows instead of a Cronjob. Job isolation: The operator spawns individual jobs per repo instead of one run. If a repo is stuck it doesn&#x27;t block everything else. Webhook support: repos get updated immediately, not just on the next cron cycle. Visibility: There&#x27;s a light-weight, built-in UI showing repos, job status, and progress.<p>There&#x27;s more on the Github repo, we added a full list of features and benefits to the readme.<p>Of course, in the end it comes down to individual preferences :) Not saying one way is better than the other. We just felt that for us, the operator-based approach would work better and we&#x27;re happy if the project is benefitial for others as well!
      • bryanlarsen3 hours ago
        Can you step back further and explain what Renovate and its competitors like Mend actually do, and what kind of tasks people use them for?
        • esafak3 hours ago
          To help you automate dependency updates, similar to dependabot.<p><a href="https:&#x2F;&#x2F;www.mend.io&#x2F;renovate&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.mend.io&#x2F;renovate&#x2F;</a><p><a href="https:&#x2F;&#x2F;github.blog&#x2F;news-insights&#x2F;product-news&#x2F;keep-all-your-packages-up-to-date-with-dependabot&#x2F;" rel="nofollow">https:&#x2F;&#x2F;github.blog&#x2F;news-insights&#x2F;product-news&#x2F;keep-all-your...</a>
        • maverwa3 hours ago
          Mend is not a competitor, renovate is the software, mend is the company.<p>They are tools that automatically check your repo for dependencies and create PRs when there are updates. It supports a wide range of package managers and other places dependencies may be specified.<p>Dependabot is another solution which is more „GitHub-native“ maybe.
        • JanLepsky3 hours ago
          In short, Renovate (by Mend) is a dependency manager for software projects. It watches your repository for outdated libraries, packages, and frameworks and opens Pull Requests to update them.
        • jamietanna1 hour ago
          See also: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=40011111">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=40011111</a><p>(a blog post I wrote, prior to joining Mend and working as a Renovate maintainer)
  • Amol-9173 hours ago
    news.ycombinator.com&#x2F;item?id=43677067
  • genie3io4 hours ago
    [dead]
  • Amol-9173 hours ago
    [flagged]
  • andix4 hours ago
    So that&#x27;s an in-cluster supply chain attack enabler? :)