Hi, Dependabot is a very useful tool as we know.
Most of (probably all) Maven / ASF projects have dedicated jira projects to track changes. When we create PR with jira issue reference in the PR title then "ASF GitHub Bot" links PR with jira issue. Maybe it will be useful (posible) when Dependabot create PR with dependency updates "ASF GitHub Bot" can create corresponding issue for it and link with PR? Sometime issue about dependency updates is created manually and it can happen that can be resolved by Dependabot PR, eg: [1] But in most of situations we have updated project dependency without jira tracking, eg: [2] What do you think about such automatically possibility, manually creating issue for each Dependabot PR can not works as we see. [1] https://issues.apache.org/jira/browse/MPOM-267 [2] https://github.com/apache/maven-apache-parent/pull/54 -- SÅ‚awomir Jaranowski https://twitter.com/SlawekJaran https://github.com/slawekjaranowski https://linkedin.com/in/slawomirjaranowski