Skip to content

Automated Dependency Updates for CircleCI

Categories: ci

Renovate supports updating CircleCI dependencies.

File Matching

By default, Renovate will check any files matching the following regular expression: (^|/)\.circleci/.+\.ya?ml$.

For details on how to extend a manager's fileMatch value, please follow this link.

Supported datasources

This manager supports extracting the following datasources: docker, orb.

Default config

{
  "fileMatch": [
    "(^|/)\\.circleci/.+\\.ya?ml$"
  ]
}

Additional Information

The circleci manager extracts both docker as well as orb datasources from CircleCI config files.

If you need to change the versioning format, read the versioning documentation to learn more.

Private orbs

To get private orbs working you should:

  1. Encrypt your CircleCI token with the Renovate encryption page
  2. Create a new hostRules entry in your Renovate config file
  3. Put the encrypted token in the token field

The end-result should look like this:

{
  "hostRules": [
    {
      "matchHost": "circleci.com",
      "authType": "Token-Only",
      "encrypted": {
        "token": "****"
      }
    }
  ]
}

This config strips the Bearer/Basic prefix from the authorization header.