Skip to main content

Automatically updating dependencies with known vulnerabilities with Dependabot security updates

Dependabot can help you fix vulnerable dependencies by automatically raising pull requests to update dependencies to secure versions.

About Dependabot security updates

Dependabot can fix vulnerable dependencies for you by raising pull requests with security updates.

Configuring Dependabot security updates

You can use Dependabot security updates or manual pull requests to easily update vulnerable dependencies.

Customizing pull requests for Dependabot security updates

Learn how to customize Dependabot pull requests for security updates to align with your project's security priorities and workflows.