Automated Dependency Updates For Bitbucket Cloud

Automated Dependency Updates For Bitbucket Cloud

Renovate now has beta support for the Bitbucket Cloud platform. This post describes how you can use Renovate to run against your repositories hosted on https://bitbucket.org.

 

How it Works

Renovate on Bitbucket is pretty much the same as on other platforms:

  1. Create a user account for the bot to user (e.g. petsco-renovate), and generate credentials
  2. Choose whether to Renovate a specific repository or repository list, or “autodiscover” every repository that the bot has access to
  3. The bot will check each repository for package files, and each package file for outdated dependencies
  4. If outdated dependencies are found, the bot will raise Pull Requests containing updates.

 

Configuring

Follow the self-hosting instructions in Renovate’s source repository here: https://github.com/renovatebot/renovate/blob/master/docs/self-hosting.md to generate an App password and save it to environment and configuration. Remaining configuration is the same as for other source code platforms.

You can then run against Bitbucket like so:

renovate --platform=bitbucket rarkins/repo1

Or if running directly from source:

yarn start --platform=bitbucket rarkins/repo1

Limitations

There are some unsupported features such as creating Issues, Comments and assigning Reviewers. Please see here for the updated list.

Bitbucket server is not supported yet. We will consider Bitbucket to be under “beta support” until it has undergone more real-world testing and we have received feedback from users.

 

Credit

Thank you to Vladimir StarkovFilip Stenbeck and Andreas Bexelius from Nordnet who did all the heavy lifting on this PR.

Rhys Arkins / About Author

Rhys Arkins is Vice President of Product Management, responsible for developer solutions at Mend.io. He was the founder of Renovate Bot – an automated tool for software dependency updating, which was acquired by Mend.io in 2019. Rhys is particularly fond of automation and a firm believer in never sending humans to do a machine’s job.