Dependabot for PHP

Dependabot creates pull requests to keep your PHP dependencies up-to-date.


Dependabot has supported PHP since June 2017. As well as Dependabot's core features our PHP support has:

Version conflicts taken care of

Dependabot considers resolvability when determining available version updates. Dependabot PRs will always resolve for your composer.json file.

Support for git sources and custom registries

As well as using the main packagist registry, Dependabot can handle git sources, custom registries (like packagist), and private registry setups.

Flexible monorepo support

Using a monorepo? No problem - you can specify one or many directories within a repo for Dependabot to look for dependency files in.

Custom branches and labels

By default, Dependabot will create PRs against your default branch and label them with "dependencies". Want to use a different branch or label? No problem.