Dependabot

All

25 repositories

dependabot-core
Public
🤖 Dependabot's core logic for creating update PRs.
javascript ruby python java go docker rust php rubygems elixir
Ruby
•
MIT License
•1.2k•5.2k•1.2k•145•Updated Sep 10, 2025Sep 10, 2025
cli
Public
A tool for testing and debugging Dependabot update jobs.
Go
•
MIT License
•62•337•17•5•Updated Sep 7, 2025Sep 7, 2025
fetch-metadata
Public
Extract information about the dependencies being updated by a Dependabot-generated PR.
TypeScript
•
MIT License
•95•255•23•10•Updated Sep 7, 2025Sep 7, 2025
smoke-tests
Public
A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.
HCL
•40•51•3•13•Updated Sep 3, 2025Sep 3, 2025
demo
Public template
🤖 Fork me to try out Dependabot
Ruby
•3.5k•250•5•10•Updated Aug 26, 2025Aug 26, 2025
codeowner-migration-action
Public
Shell
•3•5•0•0•Updated Aug 1, 2025Aug 1, 2025
example-cli-usage
Public
Demonstrates how to self-host Dependabot
Shell
•
MIT License
•14•17•0•4•Updated May 8, 2025May 8, 2025
dependabot-script
Public archive
Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.
Ruby
•
MIT License
•275•562•0•7•Updated May 8, 2025May 8, 2025
goproxy
Public archive
An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-registry-credential-management We maintain a fork in case the original goes down or if we need to run additional patches on top.
Go
•
BSD 3-Clause "New" or "Revised" License
•1.2k•13•0•1•Updated Mar 13, 2025Mar 13, 2025
git-shim
Public
git https shim
Go
•7•21•1•1•Updated Jun 16, 2024Jun 16, 2024
.github
Public
19•18•0•0•Updated Apr 29, 2024Apr 29, 2024
yarn-lib
Public
A build of yarn that provides access to its internals
Shell
•18•16•0•0•Updated Apr 17, 2024Apr 17, 2024
dependabot-actions-workflow
Public archive
Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.
Ruby
•19•35•0•1•Updated May 12, 2023May 12, 2023
dummy-packages
Public
Dummy packages for testing Dependabot
Ruby
•12•16•0•0•Updated May 12, 2023May 12, 2023
updater-action
Public archive
Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depend on its original location.
TypeScript
•
MIT License
•55•7•0•0•Updated Oct 7, 2022Oct 7, 2022
gem-vulnerability-analysis
Public archive
Jupyter notebook for a blog post on gem vulnerabilities and version updates.
Jupyter Notebook
•4•21•0•0•Updated Sep 6, 2022Sep 6, 2022
prometheus-aggregator-ruby
Public archive
A Ruby client for https://github.com/peterbourgon/prometheus-aggregator
Ruby
•
MIT License
•2•8•0•4•Updated Aug 9, 2022Aug 9, 2022
elixir-security-advisories
Public archive
Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.
elixir security
Ruby
•
Other
•9•151•1•0•Updated Jul 22, 2022Jul 22, 2022
gomodules-extracted
Public archive
This code was originally used in dependabot-core, but has since been removed. See Readme for details.
Go
•10•17•0•0•Updated Nov 24, 2021Nov 24, 2021
api-docs
Public archive
[Deprecated] Documentation for Dependabot Preview's API
20•40•3•0•Updated Jul 29, 2021Jul 29, 2021
feedback
Public archive
The old feedback repository for Dependabot. Click below for the new repository.
29•93•0•0•Updated Jun 29, 2020Jun 29, 2020
vgotest
Public
A dummy Go Module for testing Dependabot.
3•9•1•0•Updated May 20, 2020May 20, 2020
monolog
Public
A fork of "Seldaek/monolog" used for dependabot-core tests
PHP
•
MIT License
•1.9k•7•0•0•Updated Aug 27, 2019Aug 27, 2019
php-dummy-pkg-b
Public
A dummy PHP package for testing Dependabot.
3•9•0•0•Updated Jun 8, 2017Jun 8, 2017
php-dummy-pkg-a
Public
A dummy PHP package for testing Dependabot.
4•11•0•0•Updated Jun 8, 2017Jun 8, 2017