Skip to content
SPECIFICTION
Get listed

Updatecli

updatecli.io

Free plan WindowsmacOSLinuxSelf-hosted
Visit updatecli.io
Spec score 7.7 #17 of 27 in Dependency Management Software

What it is

Updatecli uses YAML manifests to retrieve values, check conditions, update files, and create pull or merge requests. Pipelines run source, condition, and target stages in that order; a target is skipped when its condition is not met. The tool runs as a single statically linked binary without a runtime dependency, server, or database, and releases are available for Linux, macOS, and Windows as well as in container images. Autodiscovery can scan repositories and create manifests for ecosystems including Dockerfiles, Helm, Terraform, npm, and Go. Plugins cover sources, conditions, targets, source-control systems, and actions, with integrations for GitHub, GitLab, Gitea, Azure DevOps, Bitbucket, Jenkins, Docker, Maven, and HTTP APIs. The GitHub SCM plugin can clone a repository and push changes to a working branch; opening a pull request requires a separate action. Manifests can be packaged as OCI artifacts for reuse. Updatecli is free and Apache-2.0 licensed. Udash reporting is experimental, requires the `--experimental` flag, and may change without the usual deprecation cycle.

Spec sheet

What it does
Updatecli reads YAML manifests, retrieves values, checks conditions, updates files, and can create pull or merge requests.Read 3 Oct 2026 · updatecli.io
Purpose
Updatecli uses YAML manifests to fetch values, check conditions, update files, and open pull or merge requests.Read 4 Oct 2026 · updatecli.io
Integrations
Its plugin catalog includes integrations for GitHub, GitLab, Gitea, Bitbucket, Azure DevOps, Docker, Helm, Maven, npm, PyPI, Terraform, and more.Read 4 Oct 2026 · updatecli.io
Security
The project asks users to report vulnerabilities privately through a GitHub security advisory or email.Read 4 Oct 2026 · updatecli.io
Support
Community support is free, and commercial services include guaranteed response times, custom development or integration, migration assistance, training, and ongoing support contracts.Read 4 Oct 2026 · updatecli.io
License
The project describes Updatecli as open source and Apache-2.0 licensed.Read 3 Oct 2026 · updatecli.io
Autodiscovery
It can scan repositories and generate manifests for Helm charts, Dockerfiles, go.mod, GitHub Actions workflows, Terraform providers, and other ecosystems.Read 4 Oct 2026 · updatecli.io
Credential handling
The GitHub plugin recommends using environment variables or secret management tools instead of hardcoding tokens in manifests.Read 4 Oct 2026 · updatecli.io
Execution
Updatecli is a single statically linked binary with no runtime dependency, server, or database requirement.Read 4 Oct 2026 · updatecli.io
Experimental feature
Udash is described as an experimental dashboard for reports published by Updatecli pipelines.Read 4 Oct 2026 · updatecli.io
Experimental feature limit
Udash reporting is experimental and requires the --experimental flag; its API and interface may change without the usual deprecation cycle.Read 3 Oct 2026 · updatecli.io
GitHub workflow
The GitHub SCM plugin clones repositories and can push changes on a working branch; a separate GitHub pull-request action is needed to open a pull request.Read 3 Oct 2026 · updatecli.io
How it runs
It is a single statically linked binary with no runtime dependency, server, or database requirement.Read 3 Oct 2026 · updatecli.io
Policies
Manifests can be packaged as OCI artifacts and reused across repositories.Read 4 Oct 2026 · updatecli.io
Supported systems
Project releases provide builds for Linux, macOS, and Windows, as well as container images.Read 4 Oct 2026 · updatecli.io
Telemetry
OpenTelemetry distributed tracing is opt-in, disabled by default, and configured through standard environment variables.Read 3 Oct 2026 · updatecli.io
Update checks
Conditions can check whether requirements hold before targets are updated, and targets are skipped when a condition is not met.Read 3 Oct 2026 · updatecli.io
Workflow
Each pipeline runs source, condition, and target stages in that order.Read 4 Oct 2026 · updatecli.io

Plans and prices

Open source Free Apache-2.0 licensed · single binary · runs locally or in CI Read 4 Oct 2026 · updatecli.io

Every Updatecli plan and price →

Strong points and limits

Strong points

  • A single binary runs without a server or database.
  • Autodiscovery supports several repository ecosystems.
  • Plugins cover popular source-control and build tools.
  • Manifests can be reused as OCI artifacts.

Limits

  • GitHub pull requests require a separate action.
  • Udash reporting is experimental and needs a flag.
  • Udash's API and interface may change without usual deprecation.

Who it suits

Updatecli suits teams automating dependency or file updates through repository pipelines. Its local binary and CI execution model may fit users who want to run updates without a server or database.

Verdict

Updatecli provides a manifest-based update workflow with broad plugin coverage and local or CI execution. Account for the separate GitHub pull-request action and the experimental status of Udash reporting.

Where Specifiction places it

Alternatives to UpdatecliAll alternatives →