Hackernews posts about Dependabot

1. Turn Dependabot off (words.filippo.io)
   647 points by todsacerdoti 7 months ago | 185 comments
2. Dependabot version updates introduce default package cooldown (github.blog)
   209 points by woodruffw 2 months ago | 143 comments
3. Weaponizing Dependabot: Pwn Request at its finest (boostsecurity.io)
   111 points by chha over 1 year ago | 58 comments
4. Fossabot: AI code review for Dependabot/Renovate on breaking changes and impacts (fossa.com)
   108 points by robszumski 12 months ago | 18 comments
5. How dependabot works (nesbitt.io)
   73 points by zdw 9 months ago | 14 comments
6. Reducing Dependabot Noise (nesbitt.io)
   64 points by zdw 9 months ago | 44 comments
7. Tell HN: GitHub's Dependabot REST API is silently returning incomplete results
   8 points by zetaben 6 months ago | 9 comments
8. Automating Dependabot PR Merges with CI/CD (michaelbastos.com)
   5 points by mbastos about 1 year ago | 1 comments
9. Renovate and Dependabot: The New Malware Delivery System (blog.gitguardian.com)
   5 points by cwinq 6 months ago | discuss
10. Weaponizing Dependabot: Pwn Request at its finest (boostsecurity.io)
    4 points by gepeto42 over 1 year ago | 1 comments
11. Dependabot PRs can cost you $48,000 a year (patchwave.ai)
    4 points by jcarver 4 months ago | discuss
12. Fixing Slow Dependabot Actions in Go Projects (www.clarityboss.com)
    3 points by dan_sbl 4 months ago | discuss
13. Go library maintainer brands GitHub's Dependabot a 'noise machine' (www.theregister.com)
    3 points by beardyw 7 months ago | discuss
14. Automating dependabot reviews how AI cut dependency research time (johnjames.blog)
    3 points by johnjames4214 11 months ago | discuss
15. PRoctr – doctor/triage for your renovate/dependabot PRs (github.com)
    2 points by mxmehl about 2 months ago | 1 comments
16. Tame Dependabot: Group your updates, slow the cadence, keep security fast (github.blog)
    2 points by smokeeaasd about 2 months ago | discuss
17. I got tired of Dependabot alerts breaking my tests (zorv.openyf.dev)
    2 points by youelfedr 4 months ago | discuss
18. Keeping our GH runners alive with dependabot (nubis-pc.eu)
    2 points by _ananos_ 7 months ago | discuss
19. The Dependabot Proxy is now open source with an MIT license (github.blog)
    2 points by tqpcharlie 8 months ago | discuss
20. Automatically Merging Dependabot PRs (lethain.com)
    2 points by gpi 9 months ago | discuss
21. Dependabot Support for Vcpkg (devblogs.microsoft.com)
    2 points by mariuz about 1 year ago | discuss
22. Dependabot failed to support uv for over a year (github.com)
    2 points by kim-gustyr about 1 year ago | discuss
23. The case for a cooldown: Why Dependabot now waits before issuing version updates (github.blog)
    1 points by Brajeshwar 2 months ago | discuss
24. Cooldowns and Dependabot Tuning (www.olafalders.com)
    1 points by oalders 4 months ago | discuss
25. Dependabot version updates now support the Nix ecosystem (github.blog)
    1 points by nateb2022 6 months ago | discuss
26. Best Practices for Reducing Dependabot Noise (nesbitt.io)
    1 points by todsacerdoti 9 months ago | discuss
27. Automatically merging dependabot PRs (lethain.com)
    1 points by saikatsg 9 months ago | discuss
28. Conda ecosystem support for Dependabot version updates now generally available (github.blog)
    1 points by croemer 9 months ago | discuss
29. Automatically Merging Dependabot Pull Requests (deanpcmad.com)
    1 points by deanpcmad 10 months ago | discuss
30. Upcoming changes to GitHub Dependabot pull request comment commands (github.blog)
    1 points by ggirelli 12 months ago | discuss