This quickstart guide walks you through setting up and enabling Dependabot, viewing Dependabot alerts, and updating your repository to use a secure version of the dependency.

Automated dependency updates built into GitHub. Dependabot has 25 repositories available. Follow their code on GitHub.

Guidance and recommendations for working with Dependabot, such as managing pull requests raised by Dependabot, using GitHub Actions with Dependabot, and troubleshooting Dependabot errors.

Monitor vulnerabilities in dependencies used in your project and keep your dependencies up-to-date with Dependabot.

You enable Dependabot version updates by checking a dependabot.yml configuration file in to your repository's .github directory. Dependabot then raises pull requests to keep the dependencies you …

Detailed information for all the options you can use to customize how Dependabot maintains your repositories.

You can enable Dependabot security updates for any repository that uses Dependabot alerts and the dependency graph. For more information, see About Dependabot security updates.

Dependabot-Core is the library at the heart of Dependabot security / version updates. Use it to generate automated pull requests updating dependencies for projects written in Ruby, JavaScript, Python, …

Dependabot alerts tell you when your code depends on a package that is insecure. Often, software is built using open-source code packages from a large variety of sources.

Dependabot version updates are automated pull requests that keep your dependencies updated, even when they don’t have any vulnerabilities. To check the status of version updates, navigate to the …