What problem does it solve? Managing dependency updates across ecosystems and monorepos generates excessive pull request noise and misconfigured dependabot.yml files, leaving repositories vulnerable or overwhelmed. ## Core Features & Use Cases - Ecosystem Detection & Configuration: Identify all package ecosystems in a repository (npm, pip, Docker, Terraform, GitHub Actions, and more) and generate correct dependabot.yml entries with proper directory mappings. - PR Noise Reduction: Apply dependency grouping, cross-directory grouping, multi-ecosystem groups, cooldown periods, and scheduling strategies to consolidate updates into fewer pull requests. - Security Update Management: Configure grouped security updates, auto-triage rules, and version-update-only disabling for supply chain security workflows. - Use Case: A team with a pnpm monorepo wants one weekly PR for all dev dependencies across /apps/* and /packages/* instead of dozens of individual PRs; this Skill produces the exact grouped configuration. ## Quick Start Ask the AI to scan this repository and generate an optimized dependabot.yml covering all detected ecosystems with grouped updates.
