The PR is done on the “develop” branch which is the one I normally use.<\/li>\n<\/li>\n <\/ul>\n
<\/p>\n
<\/p>\n
To get it going, you will only need to create this file in the default branch you have on GitHub, such as trunk<\/em>, main<\/em>, or master<\/em>.<\/p>\n<\/p>\n
<\/p>\n
Copy<\/button><\/div>.github\/dependabot.yml<\/code><\/code><\/pre><\/div>\n.
<\/p>\n
With the following content:<\/p>\n
.
<\/p>\n
Copy<\/button><\/div>version: 2\nupdates:\n - package-ecosystem: github-actions\n directory: '\/'\n schedule:\n interval: weekly\n open-pull-requests-limit: 10\n target-branch: \"develop\"\n\n - package-ecosystem: npm\n directory: '\/'\n schedule:\n interval: weekly\n open-pull-requests-limit: 10\n target-branch: \"develop\"\n\n - package-ecosystem: composer\n directory: '\/'\n schedule:\n interval: weekly\n open-pull-requests-limit: 10\n target-branch: \"develop\"<\/code><\/pre><\/div>\n<\/p>","protected":false},"excerpt":{"rendered":"
When we program in PHP\/JS and use libraries such as composer or npm, which are fundamental in our work. Having them updated is essential for security reasons mainly. This makes our programming more secure and even if it depends on third parties, it is also updated. What is dependabot? Dependabot is a tool integrated in GitHub that helps to manage and maintain the dependencies of a software project automatically. It takes care of regularly checking dependency configuration files, such as package.json files in Node.js projects, composer.json for PHP, pom.xml in Java projects, Gemfile for Ruby, among others. Dependabot … Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","inline_featured_image":false,"_ayudawp_aiss_exclude":false,"webmentions_disabled_pings":false,"webmentions_disabled":false,"editor_notices":[],"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4158","post","type-post","status-publish","format-standard","hentry","category-blog","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50"],"_links":{"self":[{"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/posts\/4158","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/comments?post=4158"}],"version-history":[{"count":0,"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/posts\/4158\/revisions"}],"wp:attachment":[{"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/media?parent=4158"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/categories?post=4158"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davidperezgar.com\/en\/wp-json\/wp\/v2\/tags?post=4158"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}