deppbot - Automated Security and Dependency Updates

deppbot ensures that your Ruby applications are kept updated, always! Based on your configured schedule, deppbot will run bundle update on your Ruby app and send the result as a Pull Request to GitHub. deppbot will also check your app periodically for any RubyGem vulnerabilities and fix it automagically.

Do, Don't Tell

Your time is precious. deppbot doesn't just tell you that your app is insecure or outdated. deppbot does the update for you with Pull Requests that are easy to review and ready to be merged.

Why Update Your Apps Frequently?

You're not taking advantage of daily improvements made to gems included in your app, and your app is prone to security risks and bugs when it's not being updated frequently.

"Can't I update my app only when things break?" - Yes, you surely can! However, the update could be massive and even result in regressions because you haven't updated the app in a while. Ouch!

Hence, it's just better to keep your apps updated, always.

Need more reasons? Read the blog post now.

How It Works?

Sign in with your GitHub login, and subscribe your repos.

deppbot will bundle update daily and issue a Pull Request to GitHub. It's even better if you have CI (Travis etc) hooked up to GitHub as the CI will run against deppbot's Pull Request and allow you to review whether any of the RubyGem updates is going to break your app.

Merge the Pull Request if all's good and it's that simple.

View an example of a deppbot Pull Request on Ruby Bench.