You should be familiar with this tiring email notification from GitHub. If you have tons of repositories on GitHub like me, you will receive tons of these emails virtually every day, and this can be annoying as most time, the vulnerabilities come fr...

Markdown supported · ⌘↵ to post
This is a great introduction to Dependabot. This is the first I'd heard of it, but I'll be sharing it with the team.

You could merge those automatically using Mergify. See this article: medium.com/mergify/automatic-merge-of-github-secu…
Michael Meyers
Have you ever tried using the
commit_messageconfiguration parameter? I've followed your steps, but dependabot doesn't seem to be respecting the commit message prefix that I gave it. I've used the config file validator and it says it looks fine. Curious if anyone else has had success with it.