Dependabot

1. Dependabot quickstart

   Enabling Dependabot alerts, security updates, and version updates for a repository.

2. Dependabot alerts

   How the dependency graph and advisory database produce alerts for vulnerable dependencies.

3. Viewing and managing alerts

   Viewing, filtering, dismissing, and reopening Dependabot alerts.

4. Auto-triage rules

   Rules that automatically dismiss or snooze alerts based on severity, scope, or patch availability.

5. Reachability analysis

   Determining whether vulnerable code is actually called to prioritize alerts.

6. Dependabot security updates

   Automatic pull requests that raise vulnerable dependencies to patched versions.

7. Dependabot version updates

   Scheduled pull requests that keep dependencies current.

8. The dependabot.yml file

   How the configuration file controls ecosystems, directories, and schedules.

9. dependabot.yml options reference

   Keys like package-ecosystem, schedule, groups, ignore, labels, versioning-strategy, and registries.

10. Dependabot pull requests

    Anatomy of Dependabot pull requests and how to manage them.

11. Pull request comment commands

    @dependabot commands such as rebase, merge, ignore, and recreate.

12. Access to private registries

    How Dependabot authenticates to package registries and handles secrets.

13. Dependabot on GitHub Actions

    Running Dependabot with Actions, permissions, secrets, and auto-merge workflows.

14. Troubleshooting Dependabot

    Dependency graph errors, stopped updates, and Dependabot job errors.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.