🧰 Renovate

The items that name it 9

• Software supply chain security best practices for 2026
  articleas tools2026-10-21It is written here as Renovate: opens PRs to update commit SHA pins, can convert tags to SHAs, covers Actions and GitLab includes.
• Dependabot vs Renovate
  articleas classification.technologies2026-09-14
• [tl;dr sec] #344 - VMs won't contain Cyber-capable Agents, AWS AI Security Analyst, Decompilers vs LLMs
  articleas tools2026-09-08

  Handled branch references when pinning GitHub Actions.

• A trust checklist for GitHub Actions
  writeupas tools2026-09-04

  Dependency automation tool to propose updates to pinned actions, configurable with a cooldown period so a compromised release has time to be discovered before reaching pipelines.

• Why NPM Malware Keeps Reaching for Bun | Supply Chain Security | Blog | Endor Labs
  articleas tools2026-08-12It is written here as Renovate (dependency update tool, can enforce minimum release age).

  dependency update tool, can enforce minimum release age

• IDP Zero-Dollar
  repoas tools2026-05-13

  Automated dependency update PRs for Helm chart versions in the GitOps repo

• The complete GitHub Actions security checklist
  articleas tools2026-05-11

  Used to keep pinned SHAs up to date for third-party actions.

• n8n Cybersecurity Workflows
  repoas tools2026-05-06

  Automated dependency update PRs

• Cooldowns.dev
  articleas tools2026-05-06

  Automated dependency update bot; minimumReleaseAge (formerly stabilityDays) cooldown setting, 3-day default for npm via config:best-practices preset since Renovate 42.