<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Dependabot on Text Matrix</title><link>https://txtmix.com/tags/dependabot/</link><description>Recent content in Dependabot on Text Matrix</description><generator>Hugo</generator><language>zh-cn</language><lastBuildDate>Sat, 23 May 2026 08:55:34 +0800</lastBuildDate><atom:link href="https://txtmix.com/tags/dependabot/index.xml" rel="self" type="application/rss+xml"/><item><title>GitHub Dependabot 自动化依赖更新：从配置到最佳实践</title><link>https://txtmix.com/posts/tech/github-dependabot-automated-updates/</link><pubDate>Fri, 15 May 2026 10:25:00 +0800</pubDate><guid>https://txtmix.com/posts/tech/github-dependabot-automated-updates/</guid><description>&lt;h1 id="github-dependabot-自动化依赖更新从配置到最佳实践">GitHub Dependabot 自动化依赖更新：从配置到最佳实践&lt;/h1>
&lt;blockquote>
&lt;p>&amp;ldquo;项目依赖 Outdated，CVEs 悄悄找上门&amp;rdquo;——这是很多团队的真实痛点。GitHub Dependabot 让依赖更新变成自动化流程：漏洞第一时间修复，版本落后自动追平，开发者只需要审 PR、点合并。&lt;/p></description></item></channel></rss>