Package-Management - 1

2026 (2)

February (2)

github: Dependabot now supports OIDC authentication

GitHub

2026-02-03

GitHub Dependabot can now authenticate to private registries using OpenID Connect (OIDC), removing the need to store long-lived registry credentials as repository secrets for Dependabot update jobs.

github: The Dependabot Proxy is now open source with an MIT license

GitHub

2026-02-03

GitHub has open-sourced the Dependabot Proxy and released it under the permissive MIT license, allowing developers to review the implementation (including how authentication is handled for different package ecosystems), reuse it, and contribute.

2025 (2)

December (1)

github: Dependabot version updates now support Julia

GitHub

2025-12-16

GitHub Dependabot's version updates now support Julia projects, allowing automatic updates of Julia dependencies.

September (1)

github: Conda ecosystem support for Dependabot now generally available

GitHub

2025-09-16

GitHub Dependabot now supports parsing and updating Conda environment.yml files, providing both security and version updates for Conda-based Python projects; the feature is generally available.