Dependabot Security Updates automatically do what?

• A. Manually update dependencies
• B. Automatically update or generate a pull request to update and fix vulnerable dependencies
• C. Scan for secrets
• D. Update CI workflows

Answer: (B)

Dependabot Security Updates automatically detects when a dependency has a known vulnerability and fixes it by updating the dependency to a safe version and creating a pull request to apply that change. It uses security advisories to determine the vulnerable versions and the appropriate fixed versions, then updates the relevant manifest and lockfile so the project builds with the patched dependency. This removes the need for manual updates and PR creation, and it’s focused on remediating vulnerable dependencies rather than scanning for secrets or modifying unrelated parts like CI workflows.