Skip to content

Pull requests: dependabot/dependabot-core

New pull request New
214 Open 8,928 Closed
214 Open 8,928 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

docs: extend documentation for the no-validate-url hack L: java:gradle Maven packages via Gradle
#14037 opened Jan 28, 2026 by yeikel Loading…
5 tasks done
3
Improved error handling for uv lock file updates L: python:uv
#14034 opened Jan 28, 2026 by thavaahariharangit Loading…
5 tasks done
2
[WIP] Fix failing GitHub Actions workflow e2e
#14031 opened Jan 27, 2026 by Copilot AI • Draft
@kbukum1
fix cargo not authenticating with org-level config due to no "registry" property L: rust:cargo Rust crates via cargo
#14030 opened Jan 27, 2026 by jakecoffman • Draft
5 tasks
2
Preserve custom properties in gradle-wrapper.properties during wrapper updates L: java:gradle Maven packages via Gradle
#14026 opened Jan 26, 2026 by Copilot AI Loading…
1
@kbukum1
14
Add pre commit file updater functionality
#14020 opened Jan 26, 2026 by AbhishekBhaskar Loading…
5 tasks done
@AbhishekBhaskar
16
Add pre commit update checker functionality
#14019 opened Jan 25, 2026 by AbhishekBhaskar Loading…
5 tasks done
@AbhishekBhaskar
19
Bump the all-actions group across 1 directory with 5 updates dependencies github_actions Pull requests that update GitHub Actions code
#14018 opened Jan 25, 2026 by dependabot bot Loading…
6
Bump lodash from 4.17.21 to 4.17.23 in /bun/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested dependencies javascript Dependabot pull requests that update Javascript code L: javascript
#14017 opened Jan 25, 2026 by dependabot bot Loading…
Bump nuget/helpers/lib/dotnet-core from 218ef74 to 28fa1c2 dependencies L: dotnet:nuget NuGet packages via nuget or dotnet submodules Pull requests that update Submodules code
#14016 opened Jan 25, 2026 by dependabot bot Loading…
@brettfo
Bump library/golang from 1.25.0-bookworm to 1.25.6-bookworm in /go_modules dependencies docker Pull requests that update Docker code L: go:modules Golang modules
#14015 opened Jan 25, 2026 by dependabot bot Loading…
Bump library/rust from 1.89.0-bookworm to 1.93.0-bookworm in /cargo dependencies docker Pull requests that update Docker code L: rust:cargo Rust crates via cargo
#14014 opened Jan 25, 2026 by dependabot bot Loading…
[SECURITY] Address CodeQL regex alert L: javascript
#14012 opened Jan 25, 2026 by corsonknowles Loading…
5 tasks done
Remove OpenStruct L: java:gradle Maven packages via Gradle L: python:uv L: python L: rust:cargo Rust crates via cargo
#14011 opened Jan 25, 2026 by corsonknowles Loading…
5 tasks done
6
Bump lodash from 4.17.21 to 4.17.23 in /bun/helpers dependencies javascript Dependabot pull requests that update Javascript code L: javascript
#14003 opened Jan 23, 2026 by dependabot bot Loading…
Bump Elixir 1.18.4 -> 1.19.5, hex 2.2.2 -> 2.3.1 L: elixir:hex Elixir packages via hex
#14002 opened Jan 23, 2026 by vanderhoop Loading…
5 tasks done
refactor for telemetry data
#14001 opened Jan 22, 2026 by a-schur • Draft
5 tasks
Implement pre commit file updater L: docker Docker containers L: javascript L: python:uv L: python
#14000 opened Jan 22, 2026 by AbhishekBhaskar • Draft
5 tasks done
@AbhishekBhaskar
Consider JRE/JDK suffixes and semantics for Maven/Gradle L: java:maven Maven packages via Maven
#13999 opened Jan 22, 2026 by yeikel Loading…
5 tasks done
1
1
Add support for versions using git revision suffixes for Maven and Gradle L: java:maven Maven packages via Maven
#13998 opened Jan 22, 2026 by yeikel • Draft
5 tasks done
Bump lodash from 4.17.21 to 4.17.23 in /bun/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested dependencies javascript Dependabot pull requests that update Javascript code L: javascript
#13996 opened Jan 21, 2026 by dependabot bot Loading…
Bump lodash from 4.17.21 to 4.17.23 in /npm_and_yarn/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested dependencies javascript Dependabot pull requests that update Javascript code L: javascript
#13995 opened Jan 21, 2026 by dependabot bot Loading…
Bump lodash from 4.17.21 to 4.17.23 in /npm_and_yarn/helpers dependencies javascript Dependabot pull requests that update Javascript code L: javascript
#13994 opened Jan 21, 2026 by dependabot bot Loading…
Bump lodash from 4.17.21 to 4.17.23 in /npm_and_yarn/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested dependencies javascript Dependabot pull requests that update Javascript code L: javascript
#13993 opened Jan 21, 2026 by dependabot bot Loading…
fix(bundler): support multiple args in required_ruby_version eval L: ruby:bundler RubyGems via bundler
#13990 opened Jan 21, 2026 by koxya • Draft
5 tasks
ProTip! no:milestone will show everything without a milestone.