Dependabot - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Leo

Jul 28

PyPI stops accepting late file uploads to releases older than 14 days

#supplychain #pypi #python #dependabot

3 min read

Induwara Ashinsana

Jul 24

Dependabot's 3-Day Cooldown: Why Waiting Is Now Safer

#supplychainsecurity #dependabot #npm

4 min read

bestbee

Jul 16

Dependabot's Three-Day Cooldown Needs an Explicit Exception Policy

#dependabot #security #product #github

2 min read

Leo

Jul 15

Dependabot learns to wait: version-update PRs now sit for three days by default

#dependabot #github #supplychain #packageupdates

4 min read

Leo

Jul 11

Innersource security advisories go GA: a private channel for private vulns

#github #ghas #dependabot #supplychain

3 min read

Leo

Jun 24

Dependabot can finally pull from private GitHub Packages without a PAT

#dependabot #githubpackages #ghcr #githubtoken

4 min read

Lincoln Zocateli

Jun 18

CI/CD Seguro: Dependabot, SAST e DAST no GitHub

#portuguese #cicd #dependabot #sast

10 min read

ThankGod Chibugwum Obobo

Jun 21

Dependency Auditing at Scale: How to Automate Supply Chain Security with Dependabot and Snyk

#supplychainsecurity #dependabot #snyk #vulnerabilitymanagement

8 min read

May 12

Filing my first security advisory

#security #rust #opensource #dependabot

8 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.