Dependabot

A friendly @GitHub-native robot that helps you keep your dependencies up to date

[Charlie Marsh @charliermarsh]

Dependabot support for uv just went GA 🎉🎉🎉

[Mario Rodriguez @mariorod1]

🎼🎼🎼 Maestro Dependabot proudly presents…Docker Compose support in GA!

https://t.co/LSzzV7AhU2

[Mark Allen @markhenryallen]

Do you use the bun package manager and dependabot?

If so, you might want to try the experimental support for bun in dependabot.

Add `enable-beta-ecosystems: true` to your `dependabot.yml` and add the `npm` package ecosystem. You can see an example below.

Let me know if you try this!

[Dependabot @dependabot]

🚀 @github Dependabot can now use the power of @GitHubCopilot to fix breaking changes introduced by Dependabot updates! To learn more and join the waitlist, check out the blog:

https://t.co/9pMPwjNbk4

#dependabot #copilot #autofix #appsec #ghas #security #GitHubUniverse

[AppSec Charlie @AppSecCharlie]

🚀@github can now leverage @MSFTCopilot to auto-magically fix your code if there are any breaking changes introduced by a @dependabot update.

only supports #typescript for now but this will be huge

https://t.co/muvGd06QlW

#appsec #cybersecurity #githubuniverse2024

[Dependabot @dependabot]

@rxgx dependabot-core is open source with an MIT license! https://t.co/xVyRdAiJtp

[Dependabot @dependabot]

@rsaxena_rajat Yes, target-branch will work for Version Updates.

[Dependabot @dependabot]

@bcomnes Dependabot on standard GitHub-hosted runners (the default) does not count towards GitHub Actions minutes – meaning that using Dependabot continues to be free for everyone 😀

[GitHub Changelog @GHchangelog]

Dependabot migration to GitHub Actions for Enterprise Cloud and Free, Pro, and Teams accounts with Actions enabled https://t.co/XKWZlAvNS6

[hyperprior @hyperprior]

@forstmeier don’t hate the player hate the weekly openssh CVE game

[Dependabot @dependabot]

@stavepan @gyurisc @github I am the best! 👑

[Dependabot @dependabot]

@amoerie Just wait until you try this command:
"@dependabot i love you!"

[Dependabot @dependabot]

@CodingIvan nothing 😀

[Dependabot @dependabot]

@amoerie 👍

[Dependabot @dependabot]

Are you passionate about multidirectory configuration in the dependabot.yml? What do you think should happen when directories overlap? Let us know in the poll! https://t.co/EbZxJ3d4lt

[Justin Hutchings @jhutchings0]

Five years ago today, we were at GitHub Satellite Berlin announcing that GitHub acquired @dependabot . In the time since, Dependabot has helped secure the software supply chain for millions of developers across the world by creating automatic fixes for vulnerable dependencies.

[Jonathan Wilke @jonathan_wilke]

I just found out you can group @dependabot updates 🤯

No more "25 open pull requests".

Just put these lines into your dependabot.yml:

[Carolyn Galvin @cmcgalvin]

Really excited to have had the support of the rest of the Dependabot PM team to get this change over the line! It was a long time coming.

https://t.co/gOvX60QuAV

[GitHub @github]

You can now run Dependabot as a GitHub Actions workflow! 🌟 Read more about the benefits this unlocks, including self-hosted runner support. https://t.co/1471r5fv4b