Presented by:

Philip Hope

from Grafana Labs

Philip is a Software Engineer in the Platform team at Grafana Labs, where they help develop the internal platform tools that support engineers across the organisation.

Before joining Grafana, they worked as a Platform Engineer and SRE, helping run and evolve data platforms. This experience includes building automation, refining CI/CD workflows, and improving the reliability and usability of internal developer tooling. They have a strong interest in streamlining cloud-native workflows and enabling teams to ship software more confidently.

Dimitrios Sotirakis

from Grafana Labs

Dimitris is a Staff Software Engineer with background in Backend, DevOps, Release and Platform Engineering. Specialized in CI/CD architecture, he has spent most of his career tackling the challenges of delivering software with quality. Currently he’s a member of a Platform team, focused on improving CI/CD observability and developer’s experience in general. Lately, he is being involved with the OpenTelemetry foundation.

No video of the event yet, sorry!

Picture this: you're managing dependencies across 1,300+ repositories, security vulnerabilities pile up faster than dishes in a university dorm, and developers spend more time updating package.json than building features. That was us at Grafana Labs.

What started as "let's try this Renovate thing" became a full automation adventure. We built a self-hosted Renovate system with opt-in/opt-out flexibility, vulnerability scanning via OSV integration, automatic digest pinning, and smart automerge rules that know when to trust a patch versus demand human review.

The real magic happened when we went meta: monitoring our dependency automation using Grafana dashboards with Loki logs and Infinity datasource. We can watch updates flow in real-time, spot bottlenecks, and prove to leadership that automation saves money.

We'll share real stories behind our metrics, spectacular failures that taught us about rate limiting, creative solutions for monorepo versioning nightmares, and how we convinced skeptical teams that automated dependencies wouldn't end in disaster. If you're wondering whether large-scale dependency automation is worth it, this talk provides the roadmap we wish we'd had.

Date:
2026 June 27 - 12:00
Duration:
45 min
Room:
Sala Fuengirola
Conference:
OpenSouthCode 2026
Language:
English
Track:
Difficulty:
Medium

Happening at the same time:

  1. OpenSouthKids
  2. Start Time:
    2026 June 27 10:00

    Room:
    Sala Málaga

  3. Observability and Alerting for your Applications using Open Source Tools
  4. Start Time:
    2026 June 27 12:00

    Room:
    Sala Benalmádena 002

  5. Load testing workshop with k6 OSS
  6. Start Time:
    2026 June 27 12:00

    Room:
    Sala 116

  7. Todo iba bien.... hasta que la IA empezó a inventar
  8. Start Time:
    2026 June 27 12:00

    Room:
    Sala Canillas 013

  9. Retro concierto con ordenadores de los años 80.
  10. Start Time:
    2026 June 27 12:00

    Room:
    Sala Frigiliana - 20