service · inferred from evidence
A service that automatically creates pull requests for dependency updates.
Workflows triggered by Dependabot pull requests fail because the default GITHUB_TOKEN is read-only and secrets are not passed to runs triggered from forks. This breaks CI steps that need to push, publish, or call external services. The Depe
Do we care if dependabot bumps release branches' minimum Go version?. Alright, this was discussed during today's working group (23rd September 2026), and the decision was to even be proactive around update go version on supported release br
Shows how to fix exclude directories like experiments from Dependabot updates. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Fixes Dependabot-triggered GitHub Actions failing from missing secrets or a read-only token by switching the workflow to the pull_request_target event, which runs in the base-branch context. Use when Dependabot PRs from forks break CI steps