Web Engineering •
Configure Dependabot grouped updates: one PR a month, CVEs instant
Dependabot grouped updates fold a month of version bumps into one pull request while CVE fixes still land same-day. The cooldown key most configs miss.
9 min read
Read more →