GitHub Community
community community Discussions
Pinned Discussions
Discussions
-
You must be logged in to vote Dependabot Now Supports Configuration of a Minimum Package Age 🤖
EnhancementAn idea, feature request, or improvement to a GitHub feature DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Show & TellDiscussions where community members share their projects, experiments, or accomplishments ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Dependabot: Single Pull Request for Multi-Ecosystem Support 🚀
EnhancementAn idea, feature request, or improvement to a GitHub feature DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Show & TellDiscussions where community members share their projects, experiments, or accomplishments ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Dependabot Metrics Page (Private Preview): Helping GHAS Code Security Users Prioritize Vulnerabilities
🚀 ShippedA feature has been released 📣 ANNOUNCEMENTAnnouncements from the GitHub Community team DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Dependabot Support for Gradle Lockfiles is Now Generally Available
🚀 ShippedA feature has been released 📣 ANNOUNCEMENTAnnouncements from the GitHub Community team DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote ❕ Upcoming Change: Dependabot Compute Migration to GitHub Actions
📣 ANNOUNCEMENTAnnouncements from the GitHub Community team ActionsBuild, test, and automate your deployment pipeline with world-class CI/CD DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote 📣 Exciting news for GitHub Advanced Security!
DependabotAutomatically update dependencies to keep your project secure and up to date Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Secret ScanningDetect and prevent the exposure of sensitive information in your code Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure EnterpriseDiscussions related to GitHub Enterprise Cloud, Enterprise Server and Organizations GHASDiscussions related to GitHub Advanced Security ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Automatically Update Bun Dependencies with Dependabot
📣 ANNOUNCEMENTAnnouncements from the GitHub Community team DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Automatically Update Docker Compose Dependencies with Dependabot ♻️
📣 ANNOUNCEMENTAnnouncements from the GitHub Community team DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Show & TellDiscussions where community members share their projects, experiments, or accomplishments ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Introducing EPSS in Dependabot Alerts 🚀
📣 ANNOUNCEMENTAnnouncements from the GitHub Community team DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote dependabot e-mails unreadable due to HTML escaping
BugGitHub or a GitHub feature is not working as intended AccessibilityMaking GitHub useable for members of the disability community DependabotAutomatically update dependencies to keep your project secure and up to date -
You must be logged in to vote [GA] Dependabot now supports pnpm workspace catalogs! 🎉
📣 ANNOUNCEMENTAnnouncements from the GitHub Community team DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote [Deprecation] Dependabot will no longer support npm v6
📣 ANNOUNCEMENTAnnouncements from the GitHub Community team DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Add custom rules to dependabot
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote What does Dependabot scan by default
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote Dependabot alert keeps popping up even though the version used for the vulnerable action is higher than the fixed version
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Dependabot Vulnerable call languages support
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote Dependabot Security Alerts should show the full path to the vulnerable dependency
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements -
You must be logged in to vote Difference between "Dependabot Alerts" and "Repository Security Advisories"
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote No notifications for dependabot failures
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote minimal customisation of dependabot.yml
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote Dependabot security update can't connect to private registry magento repository
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote The alert you requested has been withdrawn and is no longer available.
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage -
You must be logged in to vote Dependabot got added to some of my repositories automatically last week.
ActionsBuild, test, and automate your deployment pipeline with world-class CI/CD DependabotAutomatically update dependencies to keep your project secure and up to date QuestionAsk and answer questions about GitHub features and usage inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote Dependabot errors when npmAlwaysAuth is true
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure npmDiscussions around programming langages, open source and software development -
You must be logged in to vote Ability to Hide Dependabot Commits/Merges in Merge History
Pull RequestsPropose, review, and discuss changes to a repository's codebase DependabotAutomatically update dependencies to keep your project secure and up to date Product FeedbackShare your thoughts and suggestions on GitHub features and improvements
