ghdepup is now self-updating

Posted by Bjoern Michaelsen on 15 June 2024

ghdepup is now self-updating

Choo-choo, choo-choo, choo-choo, choo

We're riding on the Tekkno train

Tekkno Train, Electric Callboy

So, for a selfhosted private project, I wanted to update my dependencies regulary and without too much hassle. Usually, tools like dependabot or renovate can be used for that. However, being a nagging old neckbeard, those two both seemed to be big dependencies themselves -- I wanted something simpler. I also wanted to try to use the github API directly and write some rust for fun.

And thus I created ghdepup, which does what I wanted -- and just that. It now works for me(tm) and if you need to get semantic versioning information from github in a way that you can easily integrate into scripts, it might also be useful for you.

However, one thing was still missing from it: A real world use case as integration test. Now in rust, your dependencies are usually managed by cargo and can be updated with cargo update. That is sensible for almost every other rust project, but as I wanted to test ghdepup itself, I shunned it and wrote a github workflow and github action that runs ghdepup on itself and suggests updates.

Should you use ghdepup now, when renovate and dependabot exist? In most current environments probably not, as the latter are more flexible and powerful. However, if you want an dependency updater that is so simple you wouldnt be scared to fork it anytime, you might want to give ghdepup a look.

Comments? Feedback? Additions? Most welcome here on the fediverse !