Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
Add .dependabot/config.yml #955
I have used dependabot extensively in my projects, which makes my life much easier, that is why I filed this PR to see it would help with this project.
Here are the configuration file doc, https://dependabot.com/docs/config-file/
But you do need to install the Github app to start generating the dependency upgrade PRs (including the security patches).