We use Renovate (by Mend) to keep dependencies current—opening pull requests as new versions ship across npm, GitHub Actions, Docker images, and more, with release notes inlined so reviewers see what changed.
Renovate's config supports grouping related updates, scheduling noisy ecosystems to off-hours, pinning or ranging strategies per package, and auto-merging trusted updates that pass CI, which keeps the dependency graph healthy without drowning the team in PRs.
How We Use It
- Automated pull requests for outdated dependencies across multiple package managers
- Grouping and scheduling updates to reduce review burden
- Auto-merging passing patch/minor updates from trusted packages
Auth & Security
Why this matters: Security is trust—modern auth and session practices protect users and keep compliance teams comfortable. Security is foundational. We standardize on modern auth, strong session management, and defense-in-depth controls to protect users and systems. Preferred defaults: BetterAuth for app auth, token-based sessions with rotation, 2FA (TOTP + WebAuthn), Arcjet for edge protection.