Skip to content
Change the repository type filter

All

    Repositories list

    • dependabot-core

      Public
      🤖 Dependabot's core logic for creating update PRs.
      Ruby
      1.3k5.4k1.2k213Updated Jan 31, 2026Jan 31, 2026
    • cli

      Public
      A tool for testing and debugging Dependabot update jobs.
      Go
      67384219Updated Jan 30, 2026Jan 30, 2026
    • smoke-tests

      Public
      A collection of manifest files for various package managers and is used to perform end-to-end tests for Dependabot.
      HCL
      4258418Updated Jan 27, 2026Jan 27, 2026
    • fetch-metadata

      Public
      Extract information about the dependencies being updated by a Dependabot-generated PR.
      TypeScript
      110291238Updated Jan 27, 2026Jan 27, 2026
    • demo

      Public template
      🤖 Fork me to try out Dependabot
      Ruby
      4.2k287114Updated Jan 24, 2026Jan 24, 2026
    • Shell
      4700Updated Aug 1, 2025Aug 1, 2025
    • example-cli-usage

      Public
      Demonstrates how to self-host Dependabot :dependabot:
      Shell
      253104Updated May 8, 2025May 8, 2025
    • dependabot-script

      Public archive
      Deprecated: Use https://github.com/dependabot/example-cli-usage/ instead.
      Ruby
      26956207Updated May 8, 2025May 8, 2025
    • goproxy

      Public archive
      An HTTP proxy library for Go. Dependabot uses this in our internal credential proxy: https://github.com/dependabot/dependabot-core/?tab=readme-ov-file#private-r…
      Go
      1.2k1601Updated Mar 13, 2025Mar 13, 2025
    • git-shim

      Public
      git https shim
      Go
      62211Updated Jun 16, 2024Jun 16, 2024
    • .github

      Public
      232000Updated Apr 29, 2024Apr 29, 2024
    • yarn-lib

      Public
      A build of yarn that provides access to its internals
      Shell
      171600Updated Apr 17, 2024Apr 17, 2024
    • dependabot-actions-workflow

      Public archive
      Old example workflow for updating Dependabot pull requests. No longer relevant, see Readme for details.
      Ruby
      183401Updated May 12, 2023May 12, 2023
    • dummy-packages

      Public
      Dummy packages for testing Dependabot
      Ruby
      141700Updated May 12, 2023May 12, 2023
    • updater-action

      Public archive
      Runs Dependabot Updates via GitHub Actions. This fork exists because the Action used to live in the Dependabot org prior to GA. So beta customers may still depe…
      TypeScript
      62700Updated Oct 7, 2022Oct 7, 2022
    • Jupyter notebook for a blog post on gem vulnerabilities and version updates.
      Jupyter Notebook
      41900Updated Sep 6, 2022Sep 6, 2022
    • A Ruby client for https://github.com/peterbourgon/prometheus-aggregator
      Ruby
      2804Updated Aug 9, 2022Aug 9, 2022
    • Old database of Elixir security advisories before the GitHub Security Advisory DB supported Hex / Elixir.
      Ruby
      815110Updated Jul 22, 2022Jul 22, 2022
    • gomodules-extracted

      Public archive
      This code was originally used in dependabot-core, but has since been removed. See Readme for details.
      Go
      81700Updated Nov 24, 2021Nov 24, 2021
    • api-docs

      Public archive
      [Deprecated] Documentation for Dependabot Preview's API
      194030Updated Jul 29, 2021Jul 29, 2021
    • feedback

      Public archive
      The old feedback repository for Dependabot. Click below for the new repository.
      299400Updated Jun 29, 2020Jun 29, 2020
    • vgotest

      Public
      A dummy Go Module for testing Dependabot.
      21010Updated May 20, 2020May 20, 2020
    • monolog

      Public
      A fork of "Seldaek/monolog" used for dependabot-core tests
      PHP
      1.9k700Updated Aug 27, 2019Aug 27, 2019
    • php-dummy-pkg-b

      Public
      A dummy PHP package for testing Dependabot.
      21000Updated Jun 8, 2017Jun 8, 2017
    • php-dummy-pkg-a

      Public
      A dummy PHP package for testing Dependabot.
      21200Updated Jun 8, 2017Jun 8, 2017