Back to updates

Dependabot - 1

2025 (12)

December (6)

github: You can now require reviews before closing Dependabot alerts with delegated alert dismissal

GitHub

2025-12-19

GitHub announced Delegated alert dismissal, a feature that requires a review process before Dependabot alerts can be closed. It is available to GitHub Code Security customers and was reported on the GitHub Blog (changelog entry dated 2025-12-19).

github: Dependabot version updates now support Julia

GitHub

2025-12-16

GitHub Dependabot's version updates now support Julia projects, allowing automatic updates of Julia dependencies.

github: Dependabot version updates now support Bazel

GitHub

2025-12-16

GitHub announced that Dependabot version updates now support Bazel projects, allowing automatic version updates for dependencies declared with Bzlmod or in WORKSPACE files.

github: Dependabot version updates now support OpenTofu

GitHub

2025-12-16

GitHub announced that Dependabot version updates now support OpenTofu, allowing projects that use OpenTofu to receive automated dependency updates to keep their infrastructure code current.

github: Dependabot security updates now support uv

GitHub

2025-12-16

Dependabot now supports security alerts and automatic dependency updates for the uv ecosystem. When vulnerabilities are found in uv dependencies, Dependabot can open security alerts and create pull requests to update to secure versions.

github: Dependabot-based dependency graphs for Go

GitHub

2025-12-09

GitHub announced Dependabot-based dependency graphs for Go projects to provide more complete and accurate transitive dependency trees, as part of continued supply chain security improvements for package ecosystem support.

November (2)

github: Custom labels configuration option for Dependabot self-hosted and larger GitHub-hosted Actions runners now generally available at the organization level

GitHub

2025-11-25

Dependabot update jobs can now target specific self-hosted and larger GitHub-hosted Actions runners by using custom labels. The feature, previously limited to a single dependabot label, is now generally available at the organization level and provides finer control over where Dependabot runs.

github: Custom labels configuration option for Dependabot self-hosted and larger GitHub-hosted Actions runners now generally available at the organization level

GitHub

2025-11-25

Dependabot update jobs can now target specific self-hosted and larger GitHub-hosted Actions runners by using custom labels. The feature, previously limited to a single dependabot label, is now generally available at the organization level and provides finer control over where Dependabot runs.

October (2)

github: Dependabot alerts API offset-based pagination parameters deprecated

GitHub

2025-10-14

GitHub has removed offset-based pagination parameters (page, first, last) from all Dependabot alerts REST API endpoints; only cursor-based parameters (before, after, per_page) are supported going forward.

github: Upcoming changes to GitHub Dependabot pull request comment commands

GitHub

2025-10-07

On November 11, 2025, GitHub will deprecate several Dependabot-specific pull request comment commands and rely on GitHub’s native pull request features instead; users should update any workflows or automations that depend on those comment commands.

September (2)

github: Conda ecosystem support for Dependabot now generally available

GitHub

2025-09-16

GitHub Dependabot now supports parsing and updating Conda environment.yml files, providing both security and version updates for Conda-based Python projects; the feature is generally available.

github: Dependabot alerts now support production context prioritization in public preview

GitHub

2025-09-10

GitHub Dependabot alerts can now use production context from external artifact registries (for example, JFrog Artifactory) and CI/CD workflows to filter and prioritize alerts. The capability is available as a public preview, letting teams focus remediation on vulnerabilities that affect production artifacts and deployments.