Keep dependency updates manageable with Dependabot.
What it does
Creates and tunes Dependabot configuration to organize dependency updates and reduce pull-request noise.
When to use it
Use for Dependabot configuration, update strategies, pull-request management, security settings, or pre-commit dependency vulnerability scanning.
How to use it
Give it a repository and the desired dependency-update behavior; it creates or optimizes the repository's Dependabot configuration.
What you provide
- An existing project
Uses
Good to know
- edits its own instructions
What you need · 2
Enables the additional pre-commit vulnerability-scanning workflow with its dependabot toolset; configuration editing does not require it.
Routes the additional dependency-scanning workflow to this skill after installing the Advanced Security plugin; it is not required for configuration editing.
Access · 3
This skill
GitHub
Enables Dependabot security updates
GitHub Advisory Database
Checks GitHub vulnerability advisories