# Contributing to promptfoo

Please refer to the guidelines on our website at [promptfoo.dev/docs/contributing](https://www.promptfoo.dev/docs/contributing). To make changes, see [docs/contributing.md](https://github.com/promptfoo/promptfoo/blob/main/site/docs/contributing.md).

## Dependency updates

- Renovate manages dependency bumps for this repo.
- New npm releases are delayed before PRs open (runtime deps: 5 days, dev deps: 2 days) to absorb supply-chain incidents and unpublish windows.
- Please avoid manual bumps unless urgent (e.g., critical security fixes).