review-deps-prs

You can triage open dependency PRs by running a discovery script that surfaces updates from Renovate, Dependabot, and manual authors across all accessible repos, then categorizes them into Security, Major, and Minor/Patch tiers for batch review.

Filtering dependency PRs by author and title detects whether updates come from Renovate, Dependabot, or manual submissions, allowing the triage process to group them accurately and apply the correct priority tier for actionable review.

The best way to categorize dependency update PRs is to group them into Security, Major, and Minor/Patch tiers based on the update type, providing clear priority indications so you can address critical vulnerabilities before minor version bumps.

Yes, you need both gh and jq installed to list dependency PRs, because the discovery script relies on gh to query repositories via the GitHub API and jq to parse and filter the returned JSON data for dependency updates.

Yes, after the script groups PRs into categorized tiers, it provides actionable commands and guidance so you can batch merge, approve, or skip Dependabot and Renovate PRs directly from the generated summary.

Dependency PRs may not show up in the triage summary if the script encounters access restrictions on certain repositories, or if the PR titles and authors do not match the configured filters for Renovate, Dependabot, or manual dependency updates.