Dependabot ORG

🤖 Dependabot's core logic for creating update PRs.

Extract information about the dependencies being updated by a Dependabot-generated PR.

A tool for testing and debugging Dependabot update jobs.

A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.

🤖 Fork me to try out Dependabot

Demonstrates how to self-host Dependabot :dependabot:

Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.

Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.

Dependabot's HTTP proxy to authenticate requests to package registries, git servers, and the GitHub API

The old feedback repository for Dependabot. Click below for the new repository.

[Deprecated] Documentation for Dependabot Preview's API

Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.

git https shim

No description.

Jupyter notebook for a blog post on gem vulnerabilities and version updates.

This code was originally used in dependabot-core, but has since been removed. See Readme for details.

Dummy packages for testing Dependabot

An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-registry-credential-management We maintain a fork in case the original goes down or if we need to run additional patches on top.

A build of yarn that provides access to its internals

A dummy PHP package for testing Dependabot.

A dummy Go Module for testing Dependabot.

A dummy PHP package for testing Dependabot.

A Ruby client for https://github.com/peterbourgon/prometheus-aggregator

A fork of "Seldaek/monolog" used for dependabot-core tests

No description.

Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depend on its original location.