Originally published at:

Dependabot creates automated dependency updates for your Ruby, Python, JavaScript, PHP, .NET, Go, Elixir, Rust, Java, and Elm. It pulls down your dependency files and looks for any outdated or insecure requirements. If any of your dependencies are out-of-date, Dependabot opens individual pull requests to update each one. You check that your tests pass, scan the included changelog and release notes, then hit merge with confidence.