Articles

Renovate bot advanced tricks feature

Renovate Bot: 3 advanced tips and tricks – Part I

This is part one of a two-part series that provides tips for advanced Renovate Bot users. Part 1 explains some important, basic Renovate concepts, illustrates how Renovate creates and updates PRs as a flow chart, goes into details about Renovate’s “post-upgrade tasks” feature, and reveals how to effectively diagnose Renovate issues. Originally posted on 2023-09-03, … Read more

renovate bot cheat sheet feature

Renovate bot cheat sheet – the 12 most useful customizations

Renovate bot (or just Renovate) is a tool that automatically updates third-party dependencies declared in your Git repository via pull requests. This Renovate cheat sheet helps teams who adopt Renovate customize the most common (and useful) configuration options, without having to know the extensive Renovate documentation. Originally posted on 2021-07-25, updated on 2026-08-12. Introduction Renovate … Read more

renovate bot introduction feature

Automatic dependency updates – a Renovate Bot introduction

Renovate bot is a tool that automatically updates software dependencies declared in your Git repository via pull requests. In this Renovate introduction, I explain the benefits of automated dependency updates, how Renovate works, how to operate/run Renovate yourself (if necessary), and how you can configure its behavior for each repository. Originally posted on 2021-07-11, updated … Read more

package version check MCP feature

MCP server for up-to-date dependencies

I present an MCP server that looks up the latest stable version of tools and packages/dependencies for Docker, Helm, GitHub Actions, NPM, PyPI, NuGet, Maven/Gradle, Go, PHP, Ruby, Rust, Swift, and Dart.

Secure health checks for minimal container images

Secure health checks for minimal container images

This article explains how to add the “lprobe” CLI tool to your container image, which executes health checks/probes triggered by the Docker daemon. In contrast to curl or other alternatives, lprobe is safe because it can only connect to localhost. It supports TCP and HTTP health checks.

Container Image Security - Minimal container images

Container image security part 2: Minimal images

This article provides an overview of free and open-source minimal container images for bare Linuxes (into which you would copy native binaries compiled with C/C++, Go, or Rust), PHP, Python, Java, C#, and Node.js, from the image vendors Google distroless, Chainguard, Ubuntu, and Azure Linux. It explains why minimal images matter, how they are defined, and their general pros and cons.