dependabot

Was der Skill vermittelt

A guidance skill from GitHub's awesome-copilot collection about Dependabot. It leads an agent through finding every dependency manifest in a repository and writing the single .github/dependabot.yml file, with grouped updates, monorepo and multi-ecosystem patterns, schedules and security-update settings, then covers handling Dependabot pull requests with comment commands and auto-triage rules. Reference files hold the configuration options, example configurations and pull request commands. For checking dependencies before a commit, it points agents to GitHub's Advanced Security plugin, which works through the GitHub MCP server. It has no scripts.

Funktionen

Details