Dependabot Alerts and Updates
A team wants GitHub to open pull requests every week that bump their npm dependencies to the latest versions, even when no vulnerability is involved. What should they configure?
Choose one answer
Secret scanning with push protection
Dependabot alerts
Dependabot version updates in .github/dependabot.yml with a weekly schedule
.github/dependabot.yml
Dependabot security updates