Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

I automated Dependabot PR cleanup — and drew a hard line on what NOT to automate

If you use GitHub, you know the rhythm: Dependabot opens a PR, CI runs green, and then a human has to answer the same questions again — is this a patch or a major? did anyone touch source code?

  • Developed CLI tool dep-triage to categorize open Dependabot PRs
  • Categorizes PRs into auto-merge, escalate, close, rebase suggestion, skip
  • Limits automation to dependency-only diffs, green CI, dependency-file changes

More from Saturday 5 September →