actions-marketplace-validations/dependabot-bump-together-action
A Dependabot GitHub Action which bumps multiple dependencies in one pull request
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Aug 24, 2023
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/marcoroth_dependabot-bump-together-action@7a7bfff8eb7ac40fff9fc38e7ee2ac8f17a32daf # no releases — HEAD as of 2026-07-12tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| dependencies | Comma-separated list of the dependencies Dependabot should bump together | yes | — |
| package_managers | Comma-separated list of the package managers Dependabot should update | yes | bundler, npm_and_yarn, pip |
| branch | The branch Dependabot runs against in your repository | yes | main |
| directory | Directory where the project lives | yes | / |
| username | The user to create the pull request | yes | x-access-token |
| token | Access token with permission to create the pull request | yes | — |
Outputs
no outputs