---
title: "Discussion on \"Automate GitHub Dependency Updates with Dependabot\" | Hashnode"
description: "Discussion on \"Automate GitHub Dependency Updates with Dependabot\". You should be familiar with this tiring email notification from GitHub.\n\nIf you have tons of repositories on GitHub like me, you will receive tons of these emails virtually every day, and this can be annoying as most time, the vulnerabilities come fr..."
url: "https://hashnode.com/posts/automate-github-dependency-updates-with-dependabot/5e0b79d1588ef29727357351"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Automate GitHub Dependency Updates with Dependabot](https://blog.bolajiayodeji.com/automate-github-dependency-updates-with-dependabot?utm_source=hashnode&utm_medium=feed)

You should be familiar with this tiring email notification from GitHub. If you have tons of repositories on GitHub like me, you will receive tons of these emails virtually every day, and this can be annoying as most time, the vulnerabilities come fr...

Dec 31, 2019 · 4 min read · blog.bolajiayodeji.com  
Updated Aug 22, 2023  
Read the article

-   [#programming](https://hashnode.com/tag/programming)
-   [#github](https://hashnode.com/tag/github)
-   [#bot](https://hashnode.com/tag/bot)
-   [#automation](https://hashnode.com/tag/automation)

## Written by

[Bolaji Ayodeji](https://hashnode.com/@bolajiayodeji)

@bolajiayodeji · Nigeria

  
[View profile](https://hashnode.com/@bolajiayodeji)

Software Engineer, Teacher, and Developer Advocate.

undefined or mostly null.

## Responses 3

Markdown supported · ⌘↵ to post

[Michael Meyers](https://hashnode.com/@mmeyers)

[Feb 10, 2020](https://hashnode.com/posts/automate-github-dependency-updates-with-dependabot/5e0b79d1588ef29727357351/comment/5e417ba1a6039fe8236b4b87)

Have you ever tried using the `commit_message` configuration parameter? I've followed your steps, but dependabot doesn't seem to be respecting the commit message prefix that I gave it. I've used the config file validator and it says it looks fine. Curious if anyone else has had success with it.

[Michael Meyers](https://hashnode.com/@mmeyers)

[Feb 10, 2020](https://hashnode.com/posts/automate-github-dependency-updates-with-dependabot/5e0b79d1588ef29727357351/comment/5e417ba1a6039fe8236b4b87#reply-5e41c32b38607e5e71a299e3)

Actually I think the problem is only with java:maven. When I did `javascript` it worked fine.

[Bolaji Ayodeji](https://hashnode.com/@bolajiayodeji)

[Feb 11, 2020](https://hashnode.com/posts/automate-github-dependency-updates-with-dependabot/5e0b79d1588ef29727357351/comment/5e417ba1a6039fe8236b4b87#reply-5e424154a6039fe8236b53ee)

Glad to hear it worked finally, cheers! [Michael Meyers](https://hashnode.com/@mmeyers)

[Quincy Larson](https://hashnode.com/@quincy)

[Jan 5, 2020](https://hashnode.com/posts/automate-github-dependency-updates-with-dependabot/5e0b79d1588ef29727357351/comment/5e11636d490269cb3022983f)

This is a great introduction to Dependabot. This is the first I'd heard of it, but I'll be sharing it with the team.

![8XEM.gif](https://cdn.hashnode.com/res/hashnode/image/upload/v1578197865312/_vv9qra18.gif)

[Bolaji Ayodeji](https://hashnode.com/@bolajiayodeji)

[Jan 5, 2020](https://hashnode.com/posts/automate-github-dependency-updates-with-dependabot/5e0b79d1588ef29727357351/comment/5e11636d490269cb3022983f#reply-5e11799f490269cb3022997b)

Glad you liked this Quincy. Thank you :).

[Julien Danjou](https://hashnode.com/@juldanjou)

[Jan 3, 2020](https://hashnode.com/posts/automate-github-dependency-updates-with-dependabot/5e0b79d1588ef29727357351/comment/5e0f455a490269cb30227ca7)

You could merge those automatically using [Mergify](https://mergify.io/). See this article: [medium.com/mergify/automatic-merge-of-github-secu…](https://medium.com/mergify/automatic-merge-of-github-security-fixes-87d7781140c0)

[Bolaji Ayodeji](https://hashnode.com/@bolajiayodeji)

[Jan 5, 2020](https://hashnode.com/posts/automate-github-dependency-updates-with-dependabot/5e0b79d1588ef29727357351/comment/5e0f455a490269cb30227ca7#reply-5e11795d490269cb30229977)

Looks great! Thanks for mentioning.