DIFF.BLOG
New Following Discover Jobs
More
Top Writers Suggest a blog Upvotes plugin
Report bug Contact About Privacy
Sign up
Topics
Follow your own topics →
Menu
New Following Discover Jobs Top Writers
More
Suggest a blog Upvotes plugin Report bug Contact About
Sign up
Privacy Policy
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS

Tame Dependabot: Group your updates, slow the cadence, keep security fast

· GitHub · July 29, 2026, 4:23 p.m.
engineering Security supply chain security Dependabot Open Source github Dependabot software development practices
Summary
This blog post discusses techniques to manage Dependabot updates in a Microsoft open-source project by grouping updates, slowing down the frequency of pull requests, and prioritizing security fixes to reduce clutter in the repository.
Read full post on github.blog →
MORE POSTS LIKE THIS
github: The Dependabot Proxy is now open source with an MIT license
Sujith Quintelier · Feb 3, 2026
Open Source github
How Dependabot Actually Works
Andrew Nesbitt · Jan 2, 2026
package managers github
Wikis: Relaunched!
Pyfound Blogspot · Oct 20, 2026
Open Source Python
Do minor curl vulnerabilities in the open
Daniel Stenberg · Oct 20, 2026
cURL and libcurl Security
Skilladopt: fit third-party Codex skills to your repo instead of installing them as-is
Community Openai · Oct 9, 2026
Open Source github
Gotcha: GitHub Custom Properties are public
Jamie Tanna · Oct 8, 2026
Open Source github
Discover more posts →
AUTHOR
BLOG POST FEATURED ON

Placeholder image
r/github

5 points

Placeholder image
Hacker News

2 points

Add this plugin to your blog
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub Continue with Google
By continuing, you agree to our Privacy Policy.