Dependabot adds AI agent package version updates, not security updates
APM support is available on all github.com plans; Enterprise Server support is planned for 3.24.
GitHub announced Dependabot version-update PRs for AI agent skills, prompts and instructions managed by Agent Package Manager (APM) on November 3. Support is available on all github.com plans and planned for Enterprise Server 3.24. It excludes security updates.
Only supported dependency formats are updated; branch tracking requires an existing lockfile. Dependabot jobs on standard GitHub-hosted runners do not consume included Actions minutes, but larger runners are billed at normal rates. This does not make the entire workflow cost-free.
No exact activation time was given. HK, Macau and Taiwan eligibility, Traditional Chinese/Cantonese interfaces, and mobile-app or standalone API support for this update remain unconfirmed; the announcement concerns github.com repositories. Checked November 4 UTC; not product-tested. Review agent-instruction sources, changes and permissions. A version update is not security certification.
Only supported dependency formats are updated; branch tracking requires an existing lockfile. Dependabot jobs on standard GitHub-hosted runners do not consume included Actions minutes, but larger runners are billed at normal rates. This does not make the entire workflow cost-free.
No exact activation time was given. HK, Macau and Taiwan eligibility, Traditional Chinese/Cantonese interfaces, and mobile-app or standalone API support for this update remain unconfirmed; the announcement concerns github.com repositories. Checked November 4 UTC; not product-tested. Review agent-instruction sources, changes and permissions. A version update is not security certification.
Usage conditions
- Hong Kong
- Hong Kong: not confirmed individually; eligible accounts, repository permissions and configuration are required, subject to organization policies and applicable rules.
- Macau
- Macau: not confirmed individually; eligible accounts, repository permissions and configuration are required, subject to organization policies and applicable rules.
- Taiwan
- Taiwan: not confirmed individually; eligible accounts, repository permissions and configuration are required, subject to organization policies and applicable rules.
Official source: Dependabot version updates support Agent Package Manager