Dependabot now signs its commits

Dependabot now signs its commits, so you can be sure they're from us.

Signed commit

We're thankful to the good people at GitHub for making this feature available through the API when we requested it.


Dependabot helps keep your dependencies up-to-date. It's free for personal accounts and open source, and always will be.

Find out moreTake me to the app