voxpupuli/renovate

voxpupuli/renovate repository overview

⁠Voxpupuli Renovate Container

⁠Information

⚠️ as of Fri Dec 12 2025 we only will build the latest version of renovate. This will be done twice a day at 08:00 and 16:00 UTC.

Renovate itself pushes updates so frequently, pinning to a specific version is not very useful.

⁠Introduction

This container can be used to update dependencies in your projects. It encapsulates renovate⁠ and all necessary plugins. See package.json⁠ for details. This is a npm application running in an alpine container. Allthought there is a very good upstream container, this container is based on alpine and much smaller.

⁠CVEs

The CVE-Score is quite low. Trivy reports no CVEs at all at the moment. But this may change, but compared

# Tue Oct 14 10:09:55 AM CEST 2025

ghcr.io/voxpupuli/renovate:41.146.4-latest (alpine 3.22.2)
==================================================
Total: 0 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

ghcr.io/renovatebot/renovate:latest (ubuntu 24.04)
==================================================
Total: 1249 (UNKNOWN: 0, LOW: 71, MEDIUM: 1177, HIGH: 1, CRITICAL: 0)

⁠Usage

Main tools in the container:

renovate

for more information see the package.json⁠

⁠Running renovate locally

You can run renovate directly using podman or docker on your local system:

podman run -e LOG_LEVEL=debug --rm -v $PWD:/data:Z ghcr.io/voxpupuli/container-renovate --platform=local --dry-run

⁠GitLab integration

see .gitlab-ci.yml⁠

⁠Config validation

cd demo/something/foo
podman run -it --rm -v $PWD:/data:Z --entrypoint renovate-config-validator ghcr.io/voxpupuli/renovate:latest
 INFO: Validating renovate.json
 INFO: Config validated successfully against 1 file(s)

⁠dry-run

cd demo/something/foo
podman run -it --rm -v $PWD:/data:Z ghcr.io/voxpupuli/renovate:latest --dry-run --platform=local
Running /container-entrypoint.d/999_git_add_safe_directory.sh
 INFO: Renovate started
       "renovateVersion": "43.255.2"
 WARN: cli config dryRun property has been changed to full
 INFO: Repository started (repository=local)
       "renovateVersion": "43.255.2"
 INFO: Dependency extraction complete (repository=local)
       "stats": {
         "managers": {
           "leiningen": {"fileCount": 1, "depCount": 71},
           "regex": {"fileCount": 3, "depCount": 21}
         },
         "total": {"fileCount": 4, "depCount": 92}
       }
 INFO: Repository finished (repository=local)
       "cloned": undefined,
       "durationMs": 11603,
       "result": undefined,
       "status": undefined,
       "enabled": undefined,
       "onboarded": undefined
 INFO: Renovate was run at log level "info". Set LOG_LEVEL=debug in environment variables to see extended debug logs.

Tag summary

Recent tags

Content type

Image

Digest

sha256:56a706546…

Size

120.4 MB

Last updated

about 6 hours ago

docker pull voxpupuli/renovate

This week's pulls

Pulls:

768

Last week

Learn more⁠