Applications and software in general these days are built on the shoulder of giants, relying on frameworks and myriad third-party libraries. However, with the benefits of using these frameworks and libraries comes the responsibility of regularly updating them to mitigate potential security risks. Doing this in a timely
manner, without skipping releases, also reduces the risk and pain of updating dependencies. This talk introduces Renovate, an open-source bot for semi-automated dependency management.