Microsoft bought Dependabot (tool that automates dependency updates& its integration directly into GitHub) in 2019
neowin.netGitHub acquires Dependabot; Launches GitHub Sponsors