You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
Pretty cool, but... it seems like a major security vulnerability that any PR that passes CI will get automatically merged 
https://twitter.com/gabro27/status/1173547934132178944 …
More generally, when you delegate any kind of decision-making to an automated process, ask yourself how it could be exploited by an adversary. Humans can adapt on the fly when an attack attempt occurs, but bots cannot. Having humans in the loop can be a powerful security feature.
I assume it only bumps dependency versions, given the name (dependabot).
And seemingly only minor versions for vulnerabilities. Seems great IMO, better than having unpatched dependencies being packaged up because maintainers are on holiday/at a conference.https://help.github.com/en/articles/configuring-automated-security-fixes …
FWIW only security patches sent by GitHub get merged
I agree, this should not happen usually
We tried such practice on large project. While you updating packages to fix one critical issue you get packages with hundred new lower priority vulnerabilities. I still think that we should review the vulnerability reproducibility instead of blindly update the packages.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
