Highly configurable automated dependency updates, free and self-hostable.
Renovate opens pull requests to update dependencies across dozens of package managers, with grouping, scheduling, automerge rules and dependency dashboards. Its configurability is the differentiator: you can automerge patch updates for dev dependencies at 3am on Sundays and hold majors for manual review.
Best for
Free and open source
Open sourceFree tier: Everything, self-hosted
What drives the bill: Free and open source, including the hosted GitHub app. Mend sells an enterprise edition with support.
Check current pricing on Mend.io’s siteFigures are indicative and were last reviewed August 2026. Vendors change pricing often; confirm before you commit.
No reviews of Renovate yet. If you have used it in anger, yours would be the first.
If Renovate is not the right fit, these solve the same problem differently.
Security Testing
Free dependency updates and vulnerability alerts, built into GitHub.
Security Testing
Developer-first security across dependencies, code, containers and infrastructure.
Security Testing
Software composition analysis with automated remediation and licence compliance.