produced by Classmethod

# Dependabot articles

Dependabot alerts REST API now allows you to directly retrieve dependency versions within a repository

2026.10.26

The default cooldown period for Dependabot version updates is now 3 days.

2026.07.25

The Story of How Dependabot's Major Version Bumps Broke Due to Ecosystem Unreadiness — The Traps of ESLint 10 and TypeScript 7

2026.07.21

The Problem of Dependabot's uv Ecosystem Breaking Lower Version Bounds in pyproject.toml and How to Deal with It

2026.07.18

The Trap Where Dependabot Wildcard Groups Disable Cooldown, and How to Deal with It

2026.07.18

I set up dependabot to match npm's min-release-age

2026.03.13