Which of the following options would close a Dependabot alert?
A.
Creating a pull request to resolve the vulnerability that will be approved and merged
B.
Viewing the Dependabot alert on the Dependabot alerts tab of your repository
C.
Viewing the dependency graph
D.
Leaving the repository in its current state
The Answer Is:
A
This question includes an explanation.
Explanation:
A Dependabot alert is only marked as resolved when the related vulnerability is no longer present in your code — specifically after you merge a pull request that updates the vulnerable dependency.
Simply viewing alerts or graphs does not affect their status. Ignoring the alert by leaving the repo unchanged keeps the vulnerability active and unresolved.