Dependency updates (Dependabot, Renovate)
Keeping libraries and frameworks current, usually with bots that open pull requests for new versions.
Small, regular updates are cheap; a two-year jump across major versions is a project. Bots such as Dependabot and Renovate open a pull request per update, and good tests decide whether it merges. Security fixes usually land only in recent versions, so falling behind turns every vulnerability into an upgrade first.
Related terms
- CVE (Common Vulnerabilities and Exposures): A public catalog that gives each known security vulnerability one ID, such as CVE-2025-55182, so everyone talks about the same bug.
- Codemod: A script that rewrites source code automatically, used for upgrades and refactors across many files at once.
- CI/CD: Continuous integration and continuous delivery: every change is built and tested automatically and can be released at any time.
