Dependabot now supports sbt. Add sbt as a package ecosystem in your dependabot.yml file. Dependabot will then monitor your build.sbt inputs and open pull requests when newer commits are available…
Release
May 26, 2026 •
1 minute read
Table of Contents
Get started
Dependabot now supports Deno. This applies to version updates, not security updates. Get started Add a Deno entry to your…
The GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, significantly…
Dependabot now waits until a new release has been available on its registry for at least three days before opening a version…
Dependabot can now read from private GitHub Packages registries without a personal access token. If a package has granted your…
GitHub is flipping Dependabot version updates to a default three-day package cooldown. A new release has to sit on its registry…
Dependency Scanning Auto-Remediation automatically upgrades dependencies, adapts code for breaking changes, and routes changes…
