Tag feed

#dependabot

21 posts0 followers

Explore Hashnode

Alternatives

Trending tags this week

TCThankGod Chibugwum Oboboactocodes.hashnode.dev4d ago · 10 min read

Dependency Auditing at Scale: How to Automate Supply Chain Security with Dependabot and Snyk

The average modern web application depends on hundreds, sometimes thousands, of transitive npm packages. Each one is a potential attack vector, a vulnerability waiting to be disclosed, a maintainer ac

0

MVMarcus Vinicius Tavaresblog.mergeguard.devMar 22 · 6 min read

AI Can Accelerate Pull Requests — but Merge Still Needs a Deterministic Control Plane

AI Can Accelerate Pull Requests — but Merge Still Needs a Deterministic Control Plane AI is becoming a useful layer in pull request workflows. It can generate code, summarize diffs, identify likely ow

0

SASonny Alves Diassonny.alvesdi.asMar 14, 2025 · 3 min read

Modern dependency management

One of the greatest tool available on GitHub is Dependabot. For those not familiar with it, in short it's a bot reviewing your list of dependencies and proposing PRs to update them. https://docs.github.com/en/code-security/getting-started/dependabot-...

0

OEOmid Eidivandiserverlessfolks.comFeb 19, 2025 · 11 min read

Automating Dependencies' Upgrade

One of the biggest challenges in software development is keeping track of the dependencies’ version releases and following the most up-to-date versions as soon as possible. While this is critical toward reducing technical debt in the long term, it ca...

0

OEOmid Eidivandiblogs.serverlessfolks.comFeb 19, 2025 · 11 min read

Automating Dependencies Upgrade

One of the biggest challenges in software development is keeping track of the dependencies’ version releases and following the most up-to-date versions as soon as possible. While this is critical toward reducing technical debt in the long term, it ca...

0

JEJoão Esperancinhajesperancinha.hashnode.devJan 8, 2025 · 4 min read

Give your security updater priority

Up until last week I was facing a curious issue on one of my old projects: https://github.com/jesperancinha/jeorg-java-test-drives. In this project, I am using the following library javax.mvc:javax.mvc-api. On this project I am using both Dependabot ...

0

NSNirav Soniniravsoni.hashnode.devJul 27, 2024 · 5 min read

GitHub Actions and Dependabot: Automate and Simplify Your Project Updates

Problem statement In the fast-paced world of software development, maintaining up-to-date dependencies is crucial for ensuring security, performance, and functionality. There's a common saying: "Don't reinvent the wheel". When building .NET applicat...

-1

KVKunal Vermakubesimplify.hashnode.devJul 12, 2024 · 8 min read

Building a Zero CVE Strategy

With the increase in software complexity and as digital threats evolve (as discussed in our previous blog) in today’s digital age, the organizations are facing a massive increase in number of security vulnerabilities. According to the Coalition Cyber...

2

SS

SASugam Aroracodewhizsugam.hashnode.devApr 20, 2024 · 6 min read

Automated Dependency Management: Harnessing Dependabot for Seamless Updates on Azure DevOps

Introduction In the ever-evolving landscape of software development, managing dependencies is paramount to ensure the stability, security, and efficiency of your projects. One powerful tool that streamlines this process is Dependabot, a trusted autom...

0

SASugam Aroracodewhizsugam.hashnode.devApr 20, 2024 · 5 min read

Dependabot vs. the Competition: Redefining Automated Dependency Management

Introduction In the ever-evolving landscape of software development, staying ahead often means keeping your dependencies up to date. Enter Dependabot, a stalwart in the realm of automated dependency management. While the concept of automated dependen...

0

#dependabot

Search Hashnode

#dependabot

Explore Hashnode

Trending tags this week

Dependency Auditing at Scale: How to Automate Supply Chain Security with Dependabot and Snyk

AI Can Accelerate Pull Requests — but Merge Still Needs a Deterministic Control Plane

Modern dependency management

Automating Dependencies' Upgrade

Automating Dependencies Upgrade

Give your security updater priority

GitHub Actions and Dependabot: Automate and Simplify Your Project Updates

Building a Zero CVE Strategy

Automated Dependency Management: Harnessing Dependabot for Seamless Updates on Azure DevOps

Dependabot vs. the Competition: Redefining Automated Dependency Management