Search

github.blog › changelog

Upcoming deprecation of Python 3.9 for Dependabot - GitHub Changelog

… May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing and new install-time controls for npm supply chain security May.19 Improvement Expanded OIDC support for Dependabot and code scanning application security supply chain secu…

May 19, 2026 · Allison

github.blog › changelog

Search and filter bar for repository security advisories - GitHub Changelog

… May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing and new install-time controls for npm supply chain security May.19 Retired Upcoming deprecation of Python 3.9 for Dependabot supply chain security May.19 Improvement Expand…

May 6, 2026 · Allison

github.blog › changelog

Synchronous SBOM API deprecated - GitHub Changelog

… May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing and new install-time controls for npm supply chain security May.19 Retired Upcoming deprecation of Python 3.9 for Dependabot supply chain security May.19 Improvement Expand…

May 12, 2026 · Allison

github.blog › changelog

Dependabot now detects malware in npm dependencies - GitHub Changelog

… May.19 Improvement Expanded OIDC support for Dependabot and code scanning application security supply chain security May.19 Improvement Start a GitHub Advanced Security trial from a risk assessment application security supply chain security May.12 Retired Synchronous SBOM API deprecated supply chai…

Mar 17, 2026 · Allison

github.blog › security › supply-chain-security

Supply chain security Archives

… Repo-jacking explained: How it works and how to protect your GitHub projects Repo-jacking is a specific type of supply chain attack. This blog post explains what it is, what the risk is, and what you can do to stay safe. …

Apr 1, 2026 · Zachary Steindler

github.blog › changelog

Cross-org Dependabot access for internal repositories - GitHub Changelog

… May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing and new install-time controls for npm supply chain security May.19 Retired Upcoming deprecation of Python 3.9 for Dependabot supply chain security May.19 Improvement Expand…

May 11, 2026 · Allison

github.blog › changelog

Dependency scanning with GitHub MCP Server is in public preview - GitHub Changelog

… May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing and new install-time controls for npm supply chain security May.19 Retired Upcoming deprecation of Python 3.9 for Dependabot supply chain security May.19 Improvement Expand…

May 5, 2026 · Allison

github.blog › changelog

Dependabot-based dependency graphs for Python - GitHub Changelog

… May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing and new install-time controls for npm supply chain security May.19 Retired Upcoming deprecation of Python 3.9 for Dependabot supply chain security May.19 Improvement Expand…

Apr 23, 2026 · Allison

github.blog › changelog

Dependabot version updates now support the Nix ecosystem - GitHub Changelog

… Learn more Configuring Dependabot version updates Introduction to Nix flakes Community discussion on Nix support May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing and new install-time controls for npm supply chain security…

Apr 7, 2026 · Allison

github.blog › changelog

npm trusted publishing now supports CircleCI - GitHub Changelog

… May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing and new install-time controls for npm supply chain security May.19 Retired Upcoming deprecation of Python 3.9 for Dependabot supply chain security May.19 Improvement Expand…

Apr 6, 2026 · Allison