Dependabot

Dependabot creates pull requests to keep your dependencies secure and up-to-date. It is integrated natively into GitHub.

When to Use

• GitHub Repos: It's the default, easiest choice.
• Security Patches: "Dependabot alert: Critical severity in lodash".
• Keeping deps fresh: Automated weekly version bumps.

Quick Start (dependabot.yml)