Blog
Notes on dependency updates, CI and fixing builds safely. RSS
- · 6 min read
The CI secrets problem nobody talks about with AI fixes
When a bot pushes a fix, your CI runs it with your secrets. Why that matters on Dependabot branches, and why Patchlit declines by default until you opt in.
- · 6 min read
Why your Dependabot PRs keep failing CI, and what to do about it
The usual reasons Dependabot and Renovate pull requests go red, what teams do about them today, and where an automated fix helps and where it cannot.
- · 6 min read
Let your CI judge the fix, not the AI
Why one party should never control both a code change and its judge, how a model can cheat its way to green CI, and how checks before and after a push stop it.