Discussion on "Automate GitHub Dependency Updates with Dependabot"

Bolaji Ayodeji · 2019-12-31T16:39:45.398Z

You should be familiar with this tiring email notification from GitHub. If you have tons of repositories on GitHub like me, you will receive tons of these emails virtually every day, and this can be annoying as most time, the vulnerabilities come fr...

Have you ever tried using the commit_message configuration parameter? I've followed your steps, but dependabot doesn't seem to be respecting the commit message prefix that I gave it. I've used the config file validator and it says it looks fine. Curious if anyone else has had success with it.

Actually I think the problem is only with java:maven. When I did javascript it worked fine.

Glad to hear it worked finally, cheers! Michael Meyers

This is a great introduction to Dependabot. This is the first I'd heard of it, but I'll be sharing it with the team.

Glad you liked this Quincy. Thank you :).

You could merge those automatically using Mergify. See this article: medium.com/mergify/automatic-merge-of-github-secu…

Looks great! Thanks for mentioning.

Discussion

Automate GitHub Dependency Updates with Dependabot

Responses(3)

Recent in Forum

Search Hashnode

Automate GitHub Dependency Updates with Dependabot

Responses(3)

Recent in Forum