Skip to content

@dependabot Dependabot

Change the repository type filter

All

    Repositories list

    25 repositories

    • dependabot-core

      Public
      🤖 Dependabot's core logic for creating update PRs.
      javascriptrubypythonjavagodockerrustphprubygemselixir
      Ruby
      •
      MIT License
      •1.3k•5.4k•1.2k•193•Updated Jan 17, 2026Jan 17, 2026

    • fetch-metadata

      Public
      Extract information about the dependencies being updated by a Dependabot-generated PR.
      TypeScript
      •
      MIT License
      •106•285•24•8•Updated Jan 13, 2026Jan 13, 2026

    • smoke-tests

      Public
      A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.
      HCL
      •39•57•4•16•Updated Jan 12, 2026Jan 12, 2026

    • cli

      Public
      A tool for testing and debugging Dependabot update jobs.
      Go
      •
      MIT License
      •65•380•21•10•Updated Jan 11, 2026Jan 11, 2026

    • demo

      Public template
      🤖 Fork me to try out Dependabot
      Ruby
      •4.1k•283•0•12•Updated Nov 24, 2025Nov 24, 2025

    • codeowner-migration-action

      Public
      Shell
      •4•7•0•0•Updated Aug 1, 2025Aug 1, 2025

    • example-cli-usage

      Public
      Demonstrates how to self-host Dependabot :dependabot:
      Shell
      •
      MIT License
      •24•29•0•4•Updated May 8, 2025May 8, 2025

    • dependabot-script

      Public archive
      Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.
      Ruby
      •
      MIT License
      •270•562•0•7•Updated May 8, 2025May 8, 2025

    • goproxy

      Public archive
      An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-registry-credential-management We maintain a fork in case the original goes down or if we need to run additional patches on top.
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •1.2k•16•0•1•Updated Mar 13, 2025Mar 13, 2025

    • git-shim

      Public
      git https shim
      Go
      •6•22•1•1•Updated Jun 16, 2024Jun 16, 2024

    • .github

      Public
      23•20•0•0•Updated Apr 29, 2024Apr 29, 2024

    • yarn-lib

      Public
      A build of yarn that provides access to its internals
      Shell
      •17•16•0•0•Updated Apr 17, 2024Apr 17, 2024

    • dependabot-actions-workflow

      Public archive
      Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.
      Ruby
      •18•34•0•1•Updated May 12, 2023May 12, 2023

    • dummy-packages

      Public
      Dummy packages for testing Dependabot
      Ruby
      •14•17•0•0•Updated May 12, 2023May 12, 2023

    • updater-action

      Public archive
      Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depend on its original location.
      TypeScript
      •
      MIT License
      •61•7•0•0•Updated Oct 7, 2022Oct 7, 2022

    • gem-vulnerability-analysis

      Public archive
      Jupyter notebook for a blog post on gem vulnerabilities and version updates.
      Jupyter Notebook
      •4•20•0•0•Updated Sep 6, 2022Sep 6, 2022

    • prometheus-aggregator-ruby

      Public archive
      A Ruby client for https://github.com/peterbourgon/prometheus-aggregator
      Ruby
      •
      MIT License
      •2•8•0•4•Updated Aug 9, 2022Aug 9, 2022

    • elixir-security-advisories

      Public archive
      Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.
      securityelixir
      Ruby
      •
      Other
      •8•151•1•0•Updated Jul 22, 2022Jul 22, 2022

    • gomodules-extracted

      Public archive
      This code was originally used in dependabot-core, but has since been removed. See Readme for details.
      Go
      •8•17•0•0•Updated Nov 24, 2021Nov 24, 2021

    • api-docs

      Public archive
      [Deprecated] Documentation for Dependabot Preview's API
      19•40•3•0•Updated Jul 29, 2021Jul 29, 2021

    • feedback

      Public archive
      The old feedback repository for Dependabot. Click below for the new repository.
      29•94•0•0•Updated Jun 29, 2020Jun 29, 2020

    • vgotest

      Public
      A dummy Go Module for testing Dependabot.
      2•10•1•0•Updated May 20, 2020May 20, 2020

    • monolog

      Public
      A fork of "Seldaek/monolog" used for dependabot-core tests
      PHP
      •
      MIT License
      •1.9k•7•0•0•Updated Aug 27, 2019Aug 27, 2019

    • php-dummy-pkg-b

      Public
      A dummy PHP package for testing Dependabot.
      2•10•0•0•Updated Jun 8, 2017Jun 8, 2017

    • php-dummy-pkg-a

      Public
      A dummy PHP package for testing Dependabot.
      2•12•0•0•Updated Jun 8, 2017Jun 8, 2017