Dependabot

Dependabot is GitHub's built-in automated dependency-management tool that scans a repository's dependencies for known vulnerabilities and outdated versions, then opens pull requests to update them automatically. It's free and enabled directly through GitHub repository settings, making it one of the most widely used tools for keeping open-source dependencies patched without manual tracking.