Dependabot - 1

2026 (8)

November (3)

github: Dependabot alerts will pause on inactive repositories

GitHub

2026-11-10

Starting December 8, 2026, GitHub will pause Dependabot alerts on most repositories that have had no activity for the past year. Existing alerts will be archived rather than deleted, and alerts can be re-enabled if the repository becomes active.

github: Dependabot version updates support Agent Package Manager

GitHub

2026-11-03

Dependabot version updates now support Agent Package Manager (APM), allowing automated pull requests to keep AI agent skills, prompts, and instructions current.

github: Dependabot now supports Python 3.15

GitHub

2026-11-03

Dependabot now supports Python 3.15, so projects can upgrade to that version and continue receiving dependency update alerts and pull requests. The support is available to all github.com users.

October (4)

github: Dependabot alerts REST API now includes dependency versions

GitHub

2026-10-20

Dependabot alerts REST API responses now include the vulnerable dependency’s version directly. A new `version_requirement` field has been added to each alert’s `dependency` object.

github: Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4

GitHub

2026-10-20

Dependabot now supports upgrades to npm 12, pnpm 11 and 12, and Bun 1.4. Projects using these package manager versions can continue receiving Dependabot updates.

github: Improved detection for withdrawn Dependabot alerts

GitHub

2026-10-13

GitHub improved how withdrawn Dependabot alerts are identified. When an advisory or vulnerability is no longer valid, Dependabot now withdraws and removes the alert, and these changes make that state easier to detect.

github: Anonymous organization-level registries for Dependabot

GitHub

2026-10-12

GitHub Dependabot now supports an Anonymous authentication method for organization-level private registries. This is intended for registries reachable without credentials, such as an internal package mirror.

September (1)

github: Repository custom runner settings for Dependabot

GitHub

2026-09-29

Repository administrators can now set the runner type, optional custom label, and optional runner group for Dependabot version and security updates. This extends existing runner configuration options for Dependabot.