Olblak on

Securing GitHub Actions Workflows with Zizmor, Scaling Using Updatecli

Fri, 13 Mar 2026 00:00:00 +0000

Recent incidents have shown that weak GitHub Actions workflows can lead to repository compromise.
A great tool to prevent this is Zizmor, a static analysis tool for GitHub Actions.

What a year 2025 has been! See you in 2026!

Wed, 31 Dec 2025 00:00:00 +0000

It’s time to close another great year on the Updatecli journey.

This year we achieved 29 releases contributed by over 20 community members.

Updatecli v0.110.0 Released: GitHub Search SCM, Git branch cleanup & Dockerfile matching, and More!

Wed, 05 Nov 2025 00:00:00 +0000

We’re excited to ship v0.110.0 — this release introduces a GitHub search SCM to target multiple repositories, improved Git branch handling (including optional cleanup of working branches), better Dockerfile matching behavior, and a handful of bug fixes and quality-of-life improvements.

Automating Golang Project Updates with Updatecli

Fri, 24 Oct 2025 00:00:00 +0000

Please note that this post is not an introduction to Updatecli but rather an overview of specific Updatecli uses cases for Golang related projects. If you are new to Updatecli, please start with Getting Started with Updatecli.

Updatecli v0.109.0 Released: GitHub App Auth, Smarter NPM & Cargo Autodiscovery, and More!

Mon, 13 Oct 2025 00:00:00 +0000

I am excited to announce the release of Updatecli v0.109.0, packed with new features and improvements that make dependency automation even more powerful and secure. This release brings major enhancements to GitHub authentication, NPM and Cargo autodiscovery, and overall developer experience.

Updatecli v0.100.0: A Milestone in Continuous Delivery

Wed, 14 May 2025 00:00:00 +0000

We just released Updatecli version v0.100.0! While hitting version 100 feels like a milestone, the truth is even more impressive: we’ve published 206 releases since the beginning of the project, 5 years ago.

Highlight of the week

Mon, 29 Jul 2024 00:00:00 +0000

What a great way to start the week by not discovering one but two blog posts about Updatecli.

The first one I discovered, was written by Sean Rigby on blog.devgenius.io

Updatecli Survey

Fri, 12 Jul 2024 00:00:00 +0000

Getting feedback on an OSS project is hard. Most of the time, we can only rely on people reporting issues, which tell us little about what we are doing right or what we should focus on.

Welcome Releasepost

Thu, 23 May 2024 00:00:00 +0000

No matter the project I am working on, I am constantly looking for project release notes.

The good news is we now have access to great tools to automatically generate those release notes such as Release Drafter, Changie, Conventional Changelog, etc.

Shareable Policies

Tue, 13 Feb 2024 00:00:00 +0000

Time flies, and It’s time for another successful experiment to go out.

Shareable Update Policies

A recurring problem over time has been, how to reuse the same Updatecli manifests for different projects.