software developed by a guy and his 7 robot friends
@sodiboo dependabot doesn’t even seem that bad but. it paints a certain picture when dependabot isn’t the only bot he’s depending on
@sodiboo idrk what dependabot really is on the inside though. maybe i’m wrong
@[email protected] dependabot is just a procedure:

- are any dependencies out of date? especially, are there any known security vulnerabilities that have been fixed?
- if so, open pull request with the dependency updated

there's more nuance but that's the entire core functionality. nothing wrong with it.
@sodiboo @shroomie yeah dependabot is old and reliable. it just checks for new software versions same as #renovatebot