Mar 22 · 6 min read · AI Can Accelerate Pull Requests — but Merge Still Needs a Deterministic Control Plane AI is becoming a useful layer in pull request workflows. It can generate code, summarize diffs, identify likely ow
Join discussionMar 14, 2025 · 3 min read · One of the greatest tool available on GitHub is Dependabot. For those not familiar with it, in short it's a bot reviewing your list of dependencies and proposing PRs to update them. https://docs.github.com/en/code-security/getting-started/dependabot-...
Join discussion
Feb 19, 2025 · 11 min read · One of the biggest challenges in software development is keeping track of the dependencies’ version releases and following the most up-to-date versions as soon as possible. While this is critical toward reducing technical debt in the long term, it ca...
Join discussion
Feb 19, 2025 · 11 min read · One of the biggest challenges in software development is keeping track of the dependencies’ version releases and following the most up-to-date versions as soon as possible. While this is critical toward reducing technical debt in the long term, it ca...
Join discussion
Jan 8, 2025 · 4 min read · Up until last week I was facing a curious issue on one of my old projects: https://github.com/jesperancinha/jeorg-java-test-drives. In this project, I am using the following library javax.mvc:javax.mvc-api. On this project I am using both Dependabot ...
Join discussion
Jul 27, 2024 · 5 min read · Problem statement In the fast-paced world of software development, maintaining up-to-date dependencies is crucial for ensuring security, performance, and functionality. There's a common saying: "Don't reinvent the wheel". When building .NET applicat...
Join discussion
Jul 12, 2024 · 8 min read · With the increase in software complexity and as digital threats evolve (as discussed in our previous blog) in today’s digital age, the organizations are facing a massive increase in number of security vulnerabilities. According to the Coalition Cyber...
SSSaloni and 1 more commented
Apr 20, 2024 · 6 min read · Introduction In the ever-evolving landscape of software development, managing dependencies is paramount to ensure the stability, security, and efficiency of your projects. One powerful tool that streamlines this process is Dependabot, a trusted autom...
Join discussion
Apr 20, 2024 · 5 min read · Introduction In the ever-evolving landscape of software development, staying ahead often means keeping your dependencies up to date. Enter Dependabot, a stalwart in the realm of automated dependency management. While the concept of automated dependen...
Join discussion
Apr 19, 2024 · 3 min read · Imagine you are on a project that haven't worked in a while. Some of the dependencies are outdated, so you want to update them to use the latest features. You run npm install and you see that there are a lot of updates available. You update them and ...
Join discussion
