Dependabot — Articles & Notes

Armored defenders on a city rampart fire energy rifles at incoming bug-droids and dripping virus creatures, while engineers in hardhats build a glowing futuristic city behind them.

Dependabot, CodeQL, and the install delay

June 6, 2026•15 min read

The GitHub-native guardrails most repos enable backwards or not at all — Dependabot, CodeQL, SECURITY.md, an install delay, and an auto-merge workflow.