compare
Dependabot vs Updatecli
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Dependabot | Updatecli |
|---|---|---|
| Language | Ruby | Go |
| Licence | MIT | Apache-2.0 |
| Stars | 5.8k | 999 |
| Latest | v0.400.0 | v0.122.1 |
| Last push | 2026-10-19 | 2026-10-18 |
| Release cadence | about 7 days between releases | about 12 days between releases |
| Active contributors | 48+ commit authors on the default branch in the last 90 days | 14 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Renovate. Alternatives to Renovate →
PartialDependabotThe update engine behind GitHub Dependabot, with fewer package managers and less configurable grouping.
PartialUpdatecliApplies declarative update pipelines to files, images and other sources, without a dashboard of pending updates.
Dependabot
- v0.400.02026-10-12Type Python registry distribution metadata
- v0.399.02026-10-05Bump pacote from 21.3.1 to 21.5.1 in /npm_and_yarn/helpers by @dependabot[bot] in
- v0.398.02026-09-28Fix NilClass passed to Pub cooldown in_cooldown_period?
- v0.397.02026-09-21Bump js-yaml from 3.14.1 to 3.15.2 in /bun/helpers by @dependabot[bot] in
- v0.396.02026-09-14Remove fully rolled out feature flags
Updatecli
- v0.122.12026-10-03fix(autodiscovery/golang): honour version filter for pseudo versions @olblak (#10695)
- v0.122.02026-09-26feat: allow to store policy assets on oci registry @olblak (#8301)
- v0.121.02026-09-11feat: Revamp udash login @olblak (#9924)
- v0.120.12026-08-14fix: skip resource depends on skipped source @olblak (#9916)
- v0.120.02026-08-05fix: file target does not confine writes to the working directory @ihopenre-eng
Dependabot
✓ signed The latest release, v0.400.0, carries a signature GitHub verified.
Loading the security report
Updatecli
✓ signed The latest release, v0.122.1, carries a signature GitHub verified.
Loading the security report