F Filippo Valsorda personal blog

Turn Dependabot off

words.filippo.io published 2026-02-208 min read

I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.

Points

647

HN comments

185

Submissions

1

Cited by

0 commenters

Tools & ProductivitySecurity & Privacy2026

Related posts from the same era

Ghostty is leaving GitHub

Mitchell Hashimoto20263,521 points1,051 commentscited by 3 details

Size of Life

NNeal Agarwal20252,619 points277 comments details

Git commands I run before reading any code

Principal Software Engineer & Codebase Rescue20262,338 points509 comments details

Uv is the best thing to happen to the Python ecosystem in a decade

Dr. Emily L. Hunt20252,214 points1,324 comments details

Zed 1.0

Zed Blog20262,153 points690 comments details

Backing up Spotify

AAnna's Archive Blog20251,980 points701 comments details