Setting the file. One moment.
Subchapter 133.3
references/pr-commands.mdMarkdown4 KBView on GitHub
Interact with Dependabot pull requests by commenting @dependabot <command>. Dependabot acknowledges commands with a thumbs-up reaction.
Deprecation Notice (January 27, 2026): The following commands have been removed: , , , , and . Use GitHub’s native UI, CLI (), API, or auto-merge feature instead.
@dependabot merge@dependabot squash and merge@dependabot cancel merge@dependabot close@dependabot reopengh pr merge| Command | Description |
|---|---|
@dependabot rebase | Rebase the PR against the target branch |
@dependabot recreate | Recreate the PR from scratch, overwriting any manual edits |
@dependabot ignore this dependency | Close the PR and stop all future updates for this dependency |
@dependabot ignore this major version | Close and stop updates for this major version |
@dependabot ignore this minor version | Close and stop updates for this minor version |
@dependabot ignore this patch version | Close and stop updates for this patch version |
@dependabot show DEPENDENCY_NAME ignore conditions | Display a table of all current ignore conditions for the dependency |
These commands work on Dependabot PRs created by grouped version or security updates.
| Command | Description |
|---|---|
@dependabot ignore DEPENDENCY_NAME | Close the PR and stop updating this dependency in the group |
@dependabot ignore DEPENDENCY_NAME major version | Stop updating this dependency’s major version |
@dependabot ignore DEPENDENCY_NAME minor version | Stop updating this dependency’s minor version |
@dependabot ignore DEPENDENCY_NAME patch version | Stop updating this dependency’s patch version |
@dependabot unignore * | Close current PR, clear ALL ignore conditions for ALL dependencies in the group, open a new PR |
@dependabot unignore DEPENDENCY_NAME | Close current PR, clear all ignores for a specific dependency, open a new PR with its updates |
@dependabot unignore DEPENDENCY_NAME IGNORE_CONDITION | Close current PR, clear a specific ignore condition, open a new PR |
Auto-merge is the recommended replacement for the deprecated @dependabot merge command:
# Enable auto-merge via GitHub CLI
gh pr merge <PR_NUMBER> --auto --squash
# Or enable auto-merge via the GitHub UI:
# PR → "Enable auto-merge" → select merge method → confirmGitHub will automatically merge the PR once all required CI checks pass.
@dependabot ignore this major versionUseful when a major version has breaking changes and migration is not yet planned.
@dependabot show express ignore conditionsDisplays a table showing all ignore conditions currently stored for the express dependency.
@dependabot unignore lodashCloses the current grouped PR, clears all ignore conditions for lodash, and opens a new PR that includes available lodash updates.
@dependabot unignore express [< 1.9, > 1.8.0]Clears only the specified version range ignore for express.
rebase to resolve conflicts while keeping your review state. Use recreate to start fresh if the PR has diverged significantly.[dependabot skip] in your commit message.ignore in dependabot.yml instead.gh pr merge), or the web UI. The old @dependabot merge commands were deprecated in January 2026.@dependabot close and @dependabot reopen commands were deprecated in January 2026.@dependabot unignore, Dependabot closes the current PR and opens a fresh one with the updated dependency set.