By running updates in containers, we're able to use the same tools and package managers that you use as a developer.
Most package managers give you two files: a manifest to declare dependencies and a lockfile to ensure installs are reproducible. We have first-class support for both and treat them differently.
With a full clone of your repo at hand, you can insert additional steps into the update process — ensuring that the final PR doesn't require any additional changes.
We aim to provide automatic updates for any kind of dependency. If you use something that we don't yet support, let's build it together.
We open source every component. You can see how they work, improve them, or build your own.
Weekly or monthly updates help keep projects relevant without being overwhelming.