AUTOMATICALLY UPDATE NPM PACKAGE DEPENDENCIES WITH DEPENDABOT

Summary from the TLDR Web Dev newsletter

Dependabot is a GitHub feature that automates dependency updates via pull requests. Users can configure Dependabot to update certain dependencies at desired frequencies, which can be useful for targeted dependency updates in large projects or libraries with numerous dependencies. Combining Dependabot with automated testing tools like GitHub Actions ensures that updates do not break existing code.