Web Security · Senior · Question 55 of 75
How should automated dependency updates (Dependabot, Renovate) be handled safely?
- ✓Correct answer: Review and test PRs, batch minor updates, and add a short cool-down so brand-new releases aren't merged instantly
- 2Merge every update automatically within seconds of release
- 3Disable updates to avoid any risk
Explanation
Never updating leaves known CVEs; updating instantly picks up freshly compromised versions. A short delay catches most malicious releases.