Skip to content

@dependabot Dependabot

Change the repository type filter

All

    Repositories list

    23 repositories

    • dependabot-core

      Public
      🤖 Dependabot's core logic for creating update PRs.
      javascriptrubypythonjavagodockerrustphprubygemselixir
      Ruby
      •
      MIT License
      •1k•4.8k•1.2k•117•Updated Jan 9, 2025Jan 9, 2025

    • smoke-tests

      Public
      A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.
      HCL
      •24•43•3•6•Updated Jan 8, 2025Jan 8, 2025

    • fetch-metadata

      Public
      Extract information about the dependencies being updated by a Dependabot-generated PR.
      TypeScript
      •
      MIT License
      •66•190•20•7•Updated Jan 5, 2025Jan 5, 2025

    • cli

      Public
      A tool for testing and debugging Dependabot update jobs.
      Go
      •
      MIT License
      •41•253•20•5•Updated Jan 5, 2025Jan 5, 2025

    • goproxy

      Public
      An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-registry-credential-management We maintain a fork in case the original goes down or if we need to run additional patches on top.
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •1.1k•7•0•0•Updated Aug 20, 2024Aug 20, 2024

    • demo

      Public template
      🤖 Fork me to try out Dependabot
      Ruby
      •2.3k•177•1•11•Updated Aug 9, 2024Aug 9, 2024

    • dependabot-script

      Public
      A simple script that demonstrates how to use Dependabot Core
      Ruby
      •
      MIT License
      •276•555•70•12•Updated Jul 8, 2024Jul 8, 2024

    • git-shim

      Public
      git https shim
      Go
      •6•21•1•1•Updated Jun 16, 2024Jun 16, 2024

    • .github

      Public
      16•18•0•2•Updated Apr 29, 2024Apr 29, 2024

    • yarn-lib

      Public
      A build of yarn that provides access to its internals
      Shell
      •18•17•0•0•Updated Apr 17, 2024Apr 17, 2024

    • dependabot-actions-workflow

      Public archive
      Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.
      Ruby
      •17•32•0•1•Updated May 12, 2023May 12, 2023

    • dummy-packages

      Public
      Dummy packages for testing Dependabot
      Ruby
      •12•17•0•0•Updated May 12, 2023May 12, 2023

    • updater-action

      Public archive
      Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depend on its original location.
      TypeScript
      •
      MIT License
      •42•8•0•0•Updated Oct 7, 2022Oct 7, 2022

    • gem-vulnerability-analysis

      Public archive
      Jupyter notebook for a blog post on gem vulnerabilities and version updates.
      Jupyter Notebook
      •4•22•0•0•Updated Sep 6, 2022Sep 6, 2022

    • prometheus-aggregator-ruby

      Public archive
      A Ruby client for https://github.com/peterbourgon/prometheus-aggregator
      Ruby
      •
      MIT License
      •2•9•0•4•Updated Aug 9, 2022Aug 9, 2022

    • elixir-security-advisories

      Public archive
      Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.
      elixirsecurity
      Ruby
      •
      Other
      •9•151•1•0•Updated Jul 22, 2022Jul 22, 2022

    • gomodules-extracted

      Public archive
      This code was originally used in dependabot-core, but has since been removed. See Readme for details.
      Go
      •9•17•0•0•Updated Nov 24, 2021Nov 24, 2021

    • api-docs

      Public archive
      [Deprecated] Documentation for Dependabot Preview's API
      21•40•3•0•Updated Jul 29, 2021Jul 29, 2021

    • feedback

      Public archive
      The old feedback repository for Dependabot. Click below for the new repository.
      28•93•0•0•Updated Jun 29, 2020Jun 29, 2020

    • vgotest

      Public
      A dummy Go Module for testing Dependabot.
      3•10•1•0•Updated May 20, 2020May 20, 2020

    • monolog

      Public
      A fork of "Seldaek/monolog" used for dependabot-core tests
      PHP
      •
      MIT License
      •1.9k•7•0•0•Updated Aug 27, 2019Aug 27, 2019

    • php-dummy-pkg-b

      Public
      A dummy PHP package for testing Dependabot.
      3•9•0•0•Updated Jun 8, 2017Jun 8, 2017

    • php-dummy-pkg-a

      Public
      A dummy PHP package for testing Dependabot.
      4•11•0•0•Updated Jun 8, 2017Jun 8, 2017