One million Dependabot pull requests merged
We’re celebrating an exciting milestone with one million Dependabot pull requests merged.
![](https://github.blog/wp-content/uploads/2019/07/dependabot-one-mil.png?resize=1600%2C850)
When we first acquired Dependabot, we made it available as a GitHub app to give you the functionality to update your projects’ dependencies with pull requests. Those updates could be used to add support for new features, introduce performance improvements, or address security vulnerabilities.
Dependabot continues to help developers take care of tedious tasks so they can focus on what matters most for their projects. It’s come a long way from its first merged pull request in April 2017, and today we’re excited to announce that Dependabot just celebrated one million merged pull requests! 🎉
The one millionth pull request
The one millionth Dependabot pull request was merged by @magarcia, when they updated their Gatsby and GitHub Pages-powered personal blog by bumping the babel-preset-gatsby package from 0.2.1
to 0.2.7
.
The process to check if a dependency is out-of-date, update it locally, find release notes for the new version, and submit a pull request may only take a few minutes—but it quickly adds up. What’s even more impressive about one million pull requests is the number of developer hours that have been saved. Without Dependabot for the past two years, we would have needed a team of engineers working solely on updating dependencies full-time. Instead, Dependabot can help those engineers focus on building new features, streamlining code, addressing bugs, and maintaining other high-priority projects.
Curious about how Dependabot can free up your time and keep your projects secure and up-to-date? Now you can install and configure it in a few clicks. Get it for free from GitHub Marketplace while we integrate it to make your workflow even more seamless.
Did you know? Dependabot also powers GitHub’s automated security fix pull requests—something we’re rolling out to all repositories that receive security alerts. GitHub will monitor your dependencies for known security vulnerabilities and automatically open pull requests to update them to the minimum required version.
Learn about automated security fixes
Tags:
Written by
Related posts
![](https://github.blog/wp-content/uploads/2023/10/Collaboration-DarkMode-2.png?resize=400%2C212)
2024 is the biggest global election year in history. What’s at stake for developers?
GitHub is considering what is at stake for our users and platform, how we can take responsible action to support free and fair elections, and how developers contribute to resilient democratic processes.
![](https://github.blog/wp-content/uploads/2023/10/AI-DarkMode-2.png?resize=400%2C212)
GitHub named a Leader in the Gartner first-ever Magic Quadrant for AI Code Assistants
This year, as part of its annual Magic Quadrant series, Gartner published a first-of-its-kind report analyzing the state of play in the AI Code Assistants market–and named GitHub a Leader.
![AI in software development 2024 survey results with colorful graphics and percentages.](https://github.blog/wp-content/uploads/2024/08/ai-survey-header.png?resize=400%2C212)
Survey: The AI wave continues to grow on software development teams
We surveyed 2,000 people on software development teams at enterprises in the U.S., Brazil, India, and Germany about the use, experience, and expectations around generative AI tools in software development.