# Streamline dependency updates with Mergify and Snyk

DevFeed: [Streamline dependency updates with Mergify and Snyk](<https://devfeed.tech/articles/streamline-dependency-updates-with-mergify-and-snyk-7887.md>)

Original publisher: [Read original article](<https://snyk.io/blog/dependency-updates-mergify-snyk/>)

Author: Liran Tal

Published: 2023-08-23T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Dependency management](<https://devfeed.tech/topics/dependency-management.md>), [Automation](<https://devfeed.tech/topics/automation.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [pull-requests](<https://devfeed.tech/topics/pull-requests.md>), [ci](<https://devfeed.tech/topics/ci.md>), [Code review](<https://devfeed.tech/topics/code-review.md>), [Security](<https://devfeed.tech/topics/security.md>), [vulnerability scanning](<https://devfeed.tech/topics/vulnerability-scanning.md>), [snyk](<https://devfeed.tech/topics/snyk.md>), [snyk-open-source](<https://devfeed.tech/topics/snyk-open-source.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [automation](<https://devfeed.tech/tags/automation.md>), [blog](<https://devfeed.tech/tags/blog.md>), [ci](<https://devfeed.tech/tags/ci.md>), [code-review](<https://devfeed.tech/tags/code-review.md>), [dependabot](<https://devfeed.tech/tags/dependabot.md>), [dependency](<https://devfeed.tech/tags/dependency.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [github](<https://devfeed.tech/tags/github.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [vulnerability-scanning](<https://devfeed.tech/tags/vulnerability-scanning.md>)

## AI overview

This article explains how Mergify and Snyk can automate dependency update workflows. Snyk identifies dependency updates and creates GitHub pull requests, while Mergify can automate pull request review and merging based on defined conditions, helping teams keep dependencies current and address security fixes with less manual work.

## Source excerpt

Automate dependency updates with Mergify and Snyk.