A friendly @GitHub-native robot that helps you keep your dependencies up to date
Joined May 2017
- Tweets 971
- Following 41
- Followers 1,909
- Likes 962
59 Photos and videos
Jun 11
If we shipped version update cooldowns as a default, would you want it on, and what should the default be?
0%
Yes, default 1 day
14%
Yes, default 3 days
86%
Yes, default 7 days
0%
No, default 0 days
7 votes • 1 day
1
114
Dependabot retweeted
Jun 10
Dependabot now supports Deno 🚀
Add package-ecosystem: "deno" to your dependabot.yml and start getting automated dependency update PRs.
Nice addition from @GitHub @deno_land
1
6
120
Dependabot retweeted
Jun 10
Just published an episode about Nix support in Dependabot with Ankit Kumar Honey, senior engineering manager at GitHub, working on the Dependabot ecosystem, and Jamie Magee, principal software engineer at Microsoft, focusing on open source software and supply chain security, who contributed the Dependabot Nix support recently. Bump bump bump.
fulltimenix.com/episodes/dep…
1
2
5
747
Jun 10
@deno_land happy to have you in Dependabot version updates! github.blog/changelog/2026-0…
2
3
901
Jun 4
It's been a minute, but I'm back on X, and I'll be around here more often. See you in the tags and comments!!
4
10
735
Dependabot retweeted
13 Mar 2025
Dependabot support for uv just went GA 🎉🎉🎉
6
22
301
10,996
Dependabot retweeted
25 Feb 2025
🎼🎼🎼 Maestro Dependabot proudly presents…Docker Compose support in GA!
github.blog/changelog/2025-0…
6
10
2,127
Dependabot retweeted
25 Jan 2025
Do you use the bun package manager and dependabot?
If so, you might want to try the experimental support for bun in dependabot.
Add `enable-beta-ecosystems: true` to your `dependabot.yml` and add the `npm` package ecosystem. You can see an example below.
Let me know if you try this!
3
3
19
3,445
4 Nov 2024
🚀 @github Dependabot can now use the power of @GitHubCopilot to fix breaking changes introduced by Dependabot updates! To learn more and join the waitlist, check out the blog:
github.blog/changelog/2024-1…
#dependabot #copilot #autofix #appsec #ghas #security #GitHubUniverse
1
1
4
934
Dependabot retweeted
1 Nov 2024
🚀@github can now leverage @MSFTCopilot to auto-magically fix your code if there are any breaking changes introduced by a @dependabot update.
only supports #typescript for now but this will be huge
github.blog/changelog/2024-1…
#appsec #cybersecurity #githubuniverse2024
1
1
380
Dependabot retweeted
10 Jul 2024
Dependabot migration to GitHub Actions for Enterprise Cloud and Free, Pro, and Teams accounts with Actions enabled github.blog/changelog/2024-0…
4
10
2,115
Dependabot retweeted
3 Jul 2024
don’t hate the player hate the weekly openssh CVE game
1
2
300
24 May 2024
Are you passionate about multidirectory configuration in the dependabot.yml? What do you think should happen when directories overlap? Let us know in the poll! github.com/dependabot/depend…
384
Dependabot retweeted
23 May 2024
Five years ago today, we were at GitHub Satellite Berlin announcing that GitHub acquired @dependabot . In the time since, Dependabot has helped secure the software supply chain for millions of developers across the world by creating automatic fixes for vulnerable dependencies.
ALT Dependabot <birthday cake> GitHub
2
8
40
8,448
Dependabot retweeted
13 May 2024
I just found out you can group @dependabot updates 🤯
No more "25 open pull requests".
Just put these lines into your dependabot.yml:
1
4
35
5,448
Dependabot retweeted
14 May 2024
Really excited to have had the support of the rest of the Dependabot PM team to get this change over the line! It was a long time coming.
github.blog/changelog/2024-0…
1
2
263
You can now run Dependabot as a GitHub Actions workflow! 🌟 Read more about the benefits this unlocks, including self-hosted runner support. github.blog/2024-05-02-depen…
4
33
133
84,954
Dependabot retweeted
20 Mar 2024
Improved error handling for Dependabot updates for NuGet github.blog/changelog/2024-0…
1
1
1,928