Which of the following options would close a Dependabot alert?
A.
Creating a pull request to resolve the vulnerability that will be approved and merged
B.
Viewing the Dependabot alert on the Dependabot alerts tab of your repository
C.
Viewing the dependency graph
D.
Leaving the repository in its current state
The Answer Is:
A
This question includes an explanation.
Explanation:
ADependabot alertis only marked asresolvedwhen the related vulnerability is no longer present in your code — specifically after youmerge a pull requestthat updates the vulnerable dependency.
Simply viewing alerts or graphs doesnotaffect their status. Ignoring the alert by leaving the repo unchanged keeps the vulnerability active and unresolved.