What is PatchWave?
PatchWave is a GitHub app that takes maintenance off your roadmap, starting with dependency updates.
It works on the pull requests Dependabot already opens. For each one, PatchWave:
- Analyzes every update against your code and returns a verdict.
- Fixes your code when an update breaks CI, and pushes the change to the pull request.
- Merges the updates your auto-merge policy allows, in the right order.
You decide what merges. Auto-merge is off until you turn it on, and PatchWave never merges a change it wrote.
Who it’s for
Section titled “Who it’s for”PatchWave is for engineering teams on GitHub that run Dependabot, especially teams whose senior engineers spend hours each week on dependency PRs.
What you get on every pull request
Section titled “What you get on every pull request”- A verdict per update: safe to merge, or action required.
- Evidence: links to the changelog, release notes, and the lines in your code that use the changed package.
- A fix when an update breaks your build, or a plan when a human needs to decide.
- One inbox across all your repositories, grouped by what each pull request needs from you.
What it doesn’t do
Section titled “What it doesn’t do”- Replace Dependabot. PatchWave works on the pull requests Dependabot opens.
- Merge outside your policy. It merges only updates that pass analysis and match your auto-merge policy.
Next steps
Section titled “Next steps”Install PatchWaveSign up, install the GitHub app, and pick your repositories.
How analysis worksHow PatchWave decides whether an update is safe for your code.
Security and privacyWhat PatchWave reads, stores, and sends to AI models.
IntegrationsConnect the tools your team uses to PatchWave.
Stuck? Email support@contextbridge.ai and a human will help.