Subscribe
Sign in
DepsHub — Update dependencies using AI
DepsHub is an AI-powered tool for developers to help keep your repositories up to date and secure. Want to migrate to a new major version of any library? Do it in seconds with DepsHub.
81
Replies
@sasha_buratynskyi The main difference is that DepsHub is focused on reducing the noise. It's not that easy to achieve, but some of the areas that we're focused on are:
- Reducing the amount of PRs by ensuring that everything is *reasonably* updated and not on the latest version all the time.
- Using AI/embeddings to automatically make breaking changes updates.
- Giving users observability (dashboard) so that they can prioritize what needs to be updated first.
None of the points above are implemented in our competitors, and I hope we will move the market in this direction a little bit!
@semanser It actually looks amazing. What is your experience with more complex updates than the one you show in your introductory video? Let's say updating a big UI library like Angular from an older version. It takes a lot of time to do it manually. I think if the AI can at least prepare a half-decent PR, it could save a lot of time as well.
Congrats on the launch 🚀
@crebuh Thanks! It really depends on how much info is available (how detailed are the changelogs, how many breaking changes, etc.). DepsHub bot is adding a comment to each change explaining why it made that change, so it's easier to navigate and understand any code changes.
Congrats on the launch, it looks really good.
I just tried, but it did a very weird PR: https://github.com/marian2js/saa...
1. It added code and comments like trying to fix a ReactNative app, even though the project is a nestjs library that doesn't use ReactNative at all.
2. It added markdown directly on code files breaking them
3. It added random properties to classes and random code, with comments that have nothing to do with the code added.
In general the PR makes no sense. I also didn't understand why it tried to change code when it was supposed to manage dependencies. I think something went really wrong here.
@marian2js Hey Mariano! Thanks for your feedback. I will take a look once the launch dust settles a little bit. I suspect that the model generated something wrong due to a high load (and throttling enabled). I will come back to you as soon as I investigate what happened. Thanks a lot for the feedback!
Really cool. Would love to add this to some of my open source repos. How hard would it be to add support for signing in with email instead of GitHub? The use case would be for dependency graphs for public open source projects. I just try to avoid signing in with GitHub. It's so hard to manage privileges on GitHub.
@sentry_co Interesting suggestion. I haven't investigated much, but I don't think it should be that complicated (unless GitHub bots don't support signing as another user 🤔)
Hey Andriy! It's super interesting seeing makers being part of the problem they are solving. It's key and speaks by it self about you as a maker. Glad to see you addressing this in such an impressive way! Really congrats
@german_merlo1 Thanks for your support! Yeah, the idea of the product came from my own pain. So I was the first user of it and tried to make it as user-friendly as possible.
Really Cool I'm currently trying to create an account, but I can't proceed beyond the account creation step.
I'm looking forward to giving it a try.
@masskoder Thanks for the feedback. Looks like our servers got stuck (good sign for a launch? 😅). I see that you signed up in our database, but we may need to process some webhooks manually. I will let you know. Thank you!
Hey Andriy! Congratulations on the launch, this looks great!
Question: sometimes my team gets busy and we let our dependency manager PRs get a bit stale over time. Is this product able to deal with those cases when updated changes are required since the time that DepsHub opened a PR for a package?
@edwardb Good question! This is not implemented yet, but there is a simple trick to make it work: just close the PR and open one using the DepsHub dashboard. We will prioritize implementing this for sure. Thanks!
This is really cool! Is there any way to specify the target version to e.g skip less stable latest releases?
@alexkupin Yes! DepsHub supports depshub.yml config file, and there is a `stability_delay` option. Here are the values by default:
stability_delay:
security: 0
major: 14
minor: 7
patch: 4
It allows you to configure how many days should pass since the release of the library to be included for the update. For example, `security: 0` means that there should be no delay between any new security release and the PR. Whereas `major: 14` means that there should be a minimum 2-week delay between the new major version release and the PR.
Wow this is really helpful, thank you for the launch! As a developer I can confirm dependency updates are one of the most painful problems in development. This will help to solve them finally. Upvoted!
@pavel_bocharov Thanks! Yeah, dependency updates are a recurrent problem that any developer is facing sooner or later. So far, there is no silver bullet for it, but I hope DepsHub makes it one step closer!
Congratulations on the launch, Andriy and the DepsHub team! 🚀
DepsHub sounds like a game-changer for managing dependencies. Keeping libraries up to date is time-consuming, especially with larger projects. The Autopilot Mode and Noise Reduction features are particularly impressive—streamlining updates while minimizing interruptions is a win-win.
The focus on security and license scanning is crucial, and it's great to see DepsHub prioritizing this with a high accuracy rate for vulnerability detection. This will definitely give teams peace of mind knowing their codebase is secure.
Looking forward to seeing how DepsHub evolves and helps developers focus more on building rather than maintaining. Best of luck with your launch! 🙌
@bonvisions It doesn't update everything to the latest version.
First, it always prioritizes packages that have security vulnerabilities. Then, after it's done, it tries to bring your project to the *relatively* latest versions of the main packages (think React if it's a frontend project). So it gradually updates your codebase until it's at some stable point where only smaller updates are needed.
I hope it answers your question. Thanks!
I love how easy it is to set up. Just install, add a token, and you’re set. Perfect for developers at any level. Keep up the great work!
Congratulations on the launch! This product is exactly what I've been looking for to keep our codebase clean and organized. Excellent tool!
Congratulations on the start! You are doing a good job! Good luck and many happy users!
Congratulations 🍾 on the launch 🚀! Seems very interesting and unique product! I can imagine how difficult to manage and keep updated on dependencies and repositories in general
Launching soon!
@semanser really neat tool for the dev environment - I like that 'reduce noise' differentiator. As a no code individual, it likely won't be a product for me but I have relayed it over to our development team to check out!
Congrats on the launch!
DepsHub