Posts from February 20, 2026

Turn Dependabot Off

Filippo Valsorda · Cryptography Engineer, ex-Go team

I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.