UPDATECLI(1)
🎀 UPDATECLI(1) — the updatecli manual, group-chat edition 🎀
okay bestie, welcome to the updatecli manual (that's UPDATECLI(1) if you're being formal 💅). Sit down, hydrate, and let's get into it.
✨ NAME ✨
updatecli — Updatecli is a declarative dependency manager command line tool 💖
✨ SYNOPSIS ✨
updatecli [options...] [argument...]✨ DESCRIPTION ✨
So. Updatecli is a declarative dependency manager command line tool 🫶 that's the whole vibe.
Based on Updatecli manifest(s), it makes sure that your target files are up to date. Like, it literally goes and keeps them fresh. No stale manifests, no cap.
Updatecli works in three stages, and the way it does this is honestly kind of iconic:
- Source — retrieve a value from a third location, like a file, an api, etc.. 👀 grab the data, get the tea.
- Condition — ensure conditions are met, based on the value that got retrieved during the source stage. vibe check time ✅
- Target — update the target, based on the value retrieved from the source stage. slay, ship it 💅
✨ OPTIONS ✨
--debug— Debug Output 🔍 like, show me everything.--disable-version-check— Disable version check (env:UPDATECLI_DISABLE_VERSION_CHECK) 🙈 she doesn't need to know.--experimental— Enable Experimental mode 🧪 live a little.--unique-tmp-dir— Use a unique temporary directory to allow running multiple Updatecli instances in parallel 🌀 so nobody's stepping on anybody's toes.
✨ COMMANDS ✨
👑 apply NAME[:TAG|@DIGEST]
- ⚠️ Deprecated in favor of
updatecli pipeline apply applychecks if an update is needed then apply the changes 🔥
OPTIONS 💅
--clean— Remove updatecli working directory like'--clean=true'🧹--clean-git-branches— Remove updatecli working git branches like'--clean-git-branches=true'🌿--commit— Record changes to the repository,'--commit=false'📝-c,--config— Sets config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'📁--disable-changelog— Disable changelog retrieval to avoid unnecessary requests (env:UPDATECLI_DISABLE_CHANGELOG) 🚫--disable-tls— Disable TLS verification like'--disable-tls=true'🔓--disable-udash-report— Disable publishing pipeline reports to Udash 📉--existing-only— Skip targets when pipeline has no existing remote branch'--existing-only=true'🙅♀️--export-report-to-yaml— Export pipeline reports to YAML files 📄--labels— Filter pipelines by their labels, accepted as a comma separated list (key:value) 🏷️--pipeline-ids— Filter pipelines to apply by their pipeline IDs, accepted as comma separated list 🆔--push— Update remote refs'--push=false'🚀--relative-paths— What the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS) 🛣️--secrets— Sets Sops secrets file uses for templating 🔐--udash-api-url— Udash API URL selecting which service stored by udash login receives pipeline reports 🌐--validate-schema— Report manifest keys not matching the Updatecli schema as warnings (env:UPDATECLI_VALIDATE_SCHEMA) ✔️-v,--values— Sets values file uses for templating 🗂️-i,--values-inline— Sets inline values uses for templating, accepted valid json/yaml string 📦
🐚 completion
Generate the autocompletion script for the specified shell 🦋 (iykyk, tab-completion is self-care)
COMMANDS
bash
Generate the autocompletion script for bash
OPTIONS
--no-descriptions— disable completion descriptions 🤐
fish
Generate the autocompletion script for fish 🐟
OPTIONS
--no-descriptions— disable completion descriptions 🤐
powershell
Generate the autocompletion script for powershell 💠
OPTIONS
--no-descriptions— disable completion descriptions 🤐
zsh
Generate the autocompletion script for zsh 🐚
OPTIONS
--no-descriptions— disable completion descriptions 🤐
🧩 compose
compose executes specific Updatecli compose tasks such as diff or apply 🛠️
COMMANDS
apply
apply checks and apply changes defined by the compose file ✅
OPTIONS
--clean— Remove updatecli working directory like'--clean=true'🧹--clean-git-branches— Remove git branches created by updatecli like'--clean-git-branches=true'🌿--commit— Record changes to the repository,'--commit=false'📝--disable-changelog— Disable changelog retrieval to avoid unnecessary requests (env:UPDATECLI_DISABLE_CHANGELOG) 🚫--disable-tls— Disable TLS verification like'--disable-tls=true'🔓--disable-udash-report— Disable publishing pipeline reports to Udash 📉--existing-only— Skip targets when pipeline has no existing remote branch'--existing-only=true'🙅♀️--export-report-to-yaml— Export pipeline reports to YAML files 📄-f,--file— Define the update-compose file 📁--ignored-policy-ids— Filter policies to ignore by their policy IDs, accepted as a comma separated list 🙈--labels— Filter pipelines to apply by their labels, accepted as a comma separated list (key:value) 🏷️--only-policy-ids— Filter policies to apply by their policy IDs, accepted as a comma separated list 🎯--pipeline-ids— Filter pipelines to apply by their pipeline IDs, accepted as a comma separated list 🆔--push— Update remote refs'--push=false'🚀--relative-paths— What the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS) 🛣️--udash-api-url— Udash API URL selecting which service stored by udash login receives pipeline reports 🌐--validate-schema— Report manifest keys not matching the Updatecli schema as warnings (env:UPDATECLI_VALIDATE_SCHEMA) ✔️
diff
diff show changes defined by the compose file 👀
OPTIONS
--clean— Remove updatecli working directory like'--clean=true'🧹--disable-changelog— Disable changelog retrieval to avoid unnecessary requests (env:UPDATECLI_DISABLE_CHANGELOG) 🚫--disable-tls— Disable TLS verification like'--disable-tls=true'🔓--disable-udash-report— Disable publishing pipeline reports to Udash 📉--export-report-to-yaml— Export pipeline reports to YAML files 📄-f,--file— Define the Updatecli compose file name 📁--ignored-policy-ids— Filter policies to ignore by their policy IDs, accepted as a comma separated list 🙈--labels— Filter pipelines to apply by their labels, accepted as a comma separated list (key:value) 🏷️--only-policy-ids— Filter policies to apply by their policy IDs, accepted as a comma separated list 🎯--pipeline-ids— Filter pipelines to apply by their IDs, accepted a comma separated list 🆔--relative-paths— What the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS) 🛣️--udash-api-url— Udash API URL selecting which service stored by udash login receives pipeline reports 🌐--validate-schema— Report manifest keys not matching the Updatecli schema as warnings (env:UPDATECLI_VALIDATE_SCHEMA) ✔️
show
show manifest(s) defined by the compose file that should be executed 🔍
OPTIONS
--clean— Remove updatecli working directory like'--clean=true'🧹--disable-prepare—--disable-prepareskip the Updatecli'prepare'stage ⏭️--disable-templating— Disable manifest templating 🚫--disable-tls— Disable TLS verification like'--disable-tls=true'🔓-f,--file— Define the update-compose file 📁--ignored-policy-ids— Filter policies to ignore by their policy IDs, accepted as a comma separated list 🙈--labels— Filter pipelines to apply by their labels, accepted as a comma separated list (key:value) 🏷️--only-policy-ids— Filter policies to apply by their policy IDs, accepted as a comma separated list 🎯--pipeline-ids— Filter pipelines to apply by their pipeline IDs, accepted a comma separated list 🆔--relative-paths— What the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS) 🛣️
🌈 diff NAME[:TAG|@DIGEST]
- ⚠️ Deprecated in favor of
updatecli pipeline diff diffshows changes 💅
OPTIONS 💅
--clean— Remove updatecli working directory like'--clean=true'🧹-c,--config— Sets config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'📁--disable-changelog— Disable changelog retrieval to avoid unnecessary requests (env:UPDATECLI_DISABLE_CHANGELOG) 🚫--disable-tls— Disable TLS verification like'--disable-tls=true'🔓--disable-udash-report— Disable publishing pipeline reports to Udash 📉--export-report-to-yaml— dumps your pipeline reports out as YAML files ✨ like it's keeping receipts--labels— filters which pipelines actually get applied based on their labels, and it's a comma-separated list inkey:valueform (yes, exactly like that)--pipeline-ids— filters pipelines by their pipeline IDs, comma-separated list, no cap 🫶--relative-paths— tells Updatecli what the relative paths inside a manifest resolve against: either"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS)--secrets— sets the Sops secrets file used for templating 🔐--udash-api-url— the Udash API URL, which picks which service — the one stored byudash login— receives your pipeline reports--validate-schema— reports manifest keys that don't match the Updatecli schema as warnings (env:UPDATECLI_VALIDATE_SCHEMA)-v,--values— sets the values file used for templating-i,--values-inline— sets inline values used for templating, and it takes a valid json/yaml string
🎀 help [command]
Help about any command. That's it, that's the whole vibe — ask and it shall explain 💅
🧪 jsonschema
Experimental 🧨 — Export JsonSchema to file.
OPTIONS
-b,--baseid— define schema baseid-d,--directory— export schema to directory
📦 manifest
manifest executes specific manifest task such as upgrade — it's the little command hub for everything manifest-y 🌸
COMMANDS
init <path> — init a new Updatecli policy
pull NAME[:TAG|@DIGEST] — pull manifest(s) from an OCI registry
OPTIONS
--disable-tls— Disable TLS verification like'--disable-tls=true'
push [PATH] — push manifest(s) to an OCI registry
OPTIONS
--assets— sets an asset file to push along with the policy, like a script or a data file. Heads up: a manifest only reaches it once pulled, and only withoptions.relativepaths: manifest👀-c,--config— sets config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'--disable-tls— Disable TLS verification like'--disable-tls=true'--overwrite— overwrite existing manifest(s) in the registry like'--overwrite=true'💥--policy— sets policy file containing policy metadata information--secrets— sets secrets file used for templating-t,--tag— name and optionally a tag (format:"name:tag")-v,--values— sets values file used for templating
show NAME[:TAG|@DIGEST] — show manifest(s) which will be executed 👀
OPTIONS
--clean— Remove updatecli working directory like'--clean=true'-c,--config— sets config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'--disable-prepare—--disable-prepareskip the Updatecli'prepare'stage--disable-templating— disable manifest templating--disable-tls— Disable TLS verification like'--disable-tls=true'--graph— output in graph format--graph-flavor— flavor of graph format, accepted values are'dot'for graphviz or'mermaid'--labels— filter pipelines to apply by their labels, accepted as a comma separated list (key:value)--pipeline-ids— filter pipelines to apply by their IDs, accepted a comma separated list--relative-paths— what the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS)--secrets— sets secrets file used for templating-v,--values— sets values file used for templating-i,--values-inline— sets inline values used for templating, accepted valid json/yaml string
upgrade — upgrade executes manifest upgrade task ⬆️
OPTIONS
-c,--config— sets config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'-i,--in-place— write the updated Updatecli manifest back to the same file instead of stdout ✍️--labels— filter pipelines to apply by their labels, accepted as a comma separated list (key:value)--pipeline-ids— filter pipelines to apply by their IDs, accepted a comma separated list
validate — validate manifest(s) against the Updatecli schema ✅
OPTIONS
-c,--config— sets config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'--disable-templating— disable manifest templating--relative-paths— what the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS)--secrets— sets secrets file used for templating--strict— report warnings as errors 😤 no chill mode-v,--values— sets values file used for templating-i,--values-inline— sets inline values used for templating, accepted valid json/yaml string
🔥 pipeline
pipeline executes specific pipeline tasks such as diff or apply — this is where the actual doing stuff happens, bestie 💜
COMMANDS
apply NAME[:TAG|@DIGEST] — apply checks if an update is needed then applies the changes 🚀
OPTIONS
--clean— Remove updatecli working directory like'--clean=true'--clean-git-branches— Remove updatecli working git branches like'--clean-git-branches=true'--commit— record changes to the repository,'--commit=false'-c,--config— sets config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'--disable-changelog— disable changelog retrieval to avoid unnecessary requests (env:UPDATECLI_DISABLE_CHANGELOG)--disable-tls— Disable TLS verification like'--disable-tls=true'--disable-udash-report— disable publishing pipeline reports to Udash 🙈--existing-only— skip targets when the pipeline has no existing remote branch'--existing-only=true'--export-report-to-yaml— export pipeline reports to YAML files--labels— filter pipelines to apply by their labels, accepted as a comma separated list (key:value)--pipeline-ids— filter pipelines to apply by their IDs, accepted a comma separated list--push— update remote refs'--push=false'--relative-paths— what the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS)--secrets— sets Sops secrets file used for templating--udash-api-url— Udash API URL selecting which service stored byudash loginreceives pipeline reports--validate-schema— report manifest keys not matching the Updatecli schema as warnings (env:UPDATECLI_VALIDATE_SCHEMA)-v,--values— sets values file used for templating-i,--values-inline— sets inline values used for templating; it expects a genuinely valid json/yaml string, so don't try to be cute with it 💅
🌈 diff NAME[:TAG|@DIGEST]
diff shows changes. That's the whole vibe. It's giving "spot the difference" but for your dependency manifests ✨
OPTIONS 🌸
--clean— removes the updatecli working directory, like'--clean=true'-c,--config— sets the config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'--disable-changelog— disables changelog retrieval so you don't make unnecessary requests (env:UPDATECLI_DISABLE_CHANGELOG)--disable-tls— disables TLS verification, like'--disable-tls=true'--disable-udash-report— disables publishing pipeline reports to Udash--export-report-to-yaml— exports pipeline reports to YAML files--labels— filters pipelines to apply by their labels, accepted as a comma separated list (key:value)--pipeline-ids— filters pipelines to apply by their pipeline IDs, accepted a comma separated list--relative-paths— decides what the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS)--secrets— sets the Sops secrets file used for templating--udash-api-url— the Udash API URL, selecting which service — stored byudash login— receives pipeline reports--validate-schema— reports manifest keys that don't match the Updatecli schema as warnings (env:UPDATECLI_VALIDATE_SCHEMA)-v,--values— sets the values file used for templating-i,--values-inline— sets inline values used for templating; expects a valid json/yaml string
🦋 prepare NAME[:TAG|@DIGEST]
prepare runs the tasks you need before a run, like git clone. It's the get-ready-with-me of subcommands 🫶
OPTIONS ✨
--clean— removes the updatecli working directory, like'--clean=true-c,--config— sets the config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'--disable-tls— disables TLS verification, like'--disable-tls=true'--labels— filters pipelines to apply by their labels, accepted as a comma separated list (key:value)--pipeline-ids— filters pipelines to apply by their pipeline IDs, accepted a comma separated list--relative-paths— decides what the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS)--secrets— sets the Sops secrets file used for templating-v,--values— sets the values file used for templating-i,--values-inline— sets inline values used for templating; expects a valid json/yaml string
ngl bestie, the page literally repeats this exact same prepare block a couple more times at different indent levels — same command, same flags, same everything. Consider the list above your one-stop shop, no cap 💀
👑 show NAME[:TAG|@DIGEST]
- Deprecated in favor of
updatecli manifest show— prints the configuration that will be executed
lowkey important: this one is deprecated, so maybe don't build your whole personality around it. Go hang with updatecli manifest show instead 🙈
OPTIONS 🎀
--clean— removes the updatecli working directory, like'--clean=true'-c,--config— sets the config file or directory. By default, Updatecli looks for a file named'updatecli.yaml'or a directory named'updatecli.d'--disable-prepare—--disable-prepare skip the Updatecli 'prepare' stage'--disable-prepare=true'--disable-tls— disables TLS verification, like'--disable-tls=true'--labels— filters pipelines to apply by their labels, accepted as a comma separated list (key:value)--pipeline-ids— filters pipelines to apply by their IDs, accepted a comma separated list--relative-paths— decides what the relative paths of a manifest resolve against:"workingdirectory"or"manifest"(env:UPDATECLI_RELATIVE_PATHS)--secrets— sets the secrets file used for templating-v,--values— sets the values file used for templating-i,--values-inline— sets inline values used for templating; expects a valid json/yaml string
💜 udash
udash provides various Udash service integration. It's the whole Udash situation, handled 🌟
COMMANDS 💅
config — [Experimental] config shows the config file path
EXAMPLES
updatecli udash configlogin url — [Experimental] login authenticates with the Udash.
OPTIONS
--api-url— api-url defines the udash API URL--token— token defines the Udash API token. Without it, Updatecli prompts for one
EXAMPLES
updatecli udash login app.updatecli.iologout url — [Experimental] logout from an Udash service.
EXAMPLES
updatecli udash logout app.updatecli.io⭐ version
Prints the current application version. Short, sweet, iconic, periodt 👑
That's the whole page bestie, you ate that 🍓 This was updatecli — the source line reads UP...I(1) (the page name got a little truncated, we still love her) — version-dated 2026-10-26. Go forth and manage your dependencies declaratively, no cap 💖🧚✨
📦 where this page comes from
- nixpkgs unstable: updatecli 0.123.0
- 💖 girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms