5-Day Review Guarantee for All Community Pull Requests

[robaiken]

Hello everyone,

We wanted to take a moment to share an important update regarding our pull request review process for the Dependabot Core repository.

5-Day Review Commitment

Starting today, our team is formally committing to reviewing and responding to all community pull requests within 5 business days.

We deeply value the time and effort that each of you put into contributing to Dependabot. Your contributions are essential to the continued improvement and success of this project, and we want to ensure that your work receives the prompt attention it deserves.

What This Means

• Every community PR will receive an initial review within 5 business days
• A specific team member will be assigned to your PR to provide support
• You'll get actionable feedback that clearly communicates next steps
• For complex PRs that require more extensive review, we'll still provide an initial response within this timeframe and work with you to support your contribution through to completion

Why We're Doing This

We recognize that slow or inconsistent response times can be discouraging for contributors. By establishing this clear commitment, we aim to:

• Show our appreciation for your valuable contributions
• Provide a more predictable and positive contributor experience
• Encourage more community participation by reducing uncertainty
• Build a stronger and more collaborative open source community

Help Us Keep This Promise

If you've submitted a PR that hasn't received a response within 5 business days, please feel free to comment on the PR tagging the maintainers or reach out in our discussions. While we'll be closely monitoring all incoming PRs, we want to ensure nothing falls through the cracks.

Thank You

Thank you for being part of the Dependabot community. Your contributions make this project better for everyone, and we're committed to supporting your efforts.

We look forward to reviewing your contributions and working together to improve Dependabot!

The Dependabot Team

[rhyskoedijk]

Awesome news, great to hear!

Are there any plans to extend this to the other Dependabot repositories that are closely coupled to dependabot-core? e.g. https://github.com/dependabot/cli

[robaiken]

We're not extending this to other Dependabot repositories like the CLI right now, but it's definitely on our radar for the future. We want to refine the process with dependabot-core first, then evaluate expanding to additional repositories.