Dependabot - 1

2025 (3)

September (3)

github: Conda ecosystem support for Dependabot now generally available

GitHub

2025-09-16

GitHub Dependabot now supports parsing and updating Conda environment.yml files, providing both security and version updates for Conda-based Python projects; the feature is generally available.

github: Dependabot alerts now support production context prioritization in public preview

GitHub

2025-09-10

GitHub Dependabot alerts can now use production context from external artifact registries (for example, JFrog Artifactory) and CI/CD workflows to filter and prioritize alerts. The capability is available as a public preview, letting teams focus remediation on vulnerabilities that affect production artifacts and deployments.

github: Go private registry support for Dependabot now generally available

GitHub

2025-09-09

Dependabot is now generally available for Go private registries: it can update private Go modules hosted on enterprise registries and behind GOPROXY-compatible private proxies, alongside public modules in the same workflow, enabling automated version and dependency updates for private Go code.