Dependabot for PHP
Dependabot creates pull requests to keep your PHP dependencies up-to-date.
Dependabot has supported PHP since June 2017. As well as Dependabot's core features our PHP support has:
Version conflicts taken care of
Dependabot considers resolvability when determining available version updates. Dependabot PRs will always resolve for your composer.json file.
Support for git sources and custom registries
As well as using the main packagist registry, Dependabot can handle git sources, custom registries (like wpackagist), and private registry setups.
Flexible monorepo support
Using a monorepo? No problem - you can specify one or many directories within a repo for Dependabot to look for dependency files in.
Custom branches and labels
By default, Dependabot will create PRs against your default branch and label them with "dependencies". Want to use a different branch or label? No problem.