How does Dependabot determine which security update PRs to open?
Dependabot relies on your repository's enabled Dependency Graph and Dependabot Alerts to identify vulnerable dependencies; it then automatically opens pull requests to update to the patched versions that resolve those alerts.
Currently there are no comments in this discussion, be the first to comment!