Skip to content

Update dependabot supported package managers with new versions of pnpm and npm - #46387

Open
StefanBRas wants to merge 2 commits into
github:mainfrom
StefanBRas:sras/dependabot-supported-package-managers-update
Open

StefanBRas wants to merge 2 commits into
github:mainfrom
StefanBRas:sras/dependabot-supported-package-managers-update

Conversation

@StefanBRas

Copy link
Copy Markdown

Why:

This github blogpost: https://github.blog/changelog/2026-10-20-dependabot-now-supports-npm-12-pnpm-11-and-12-and-bun-1-4/ says that new versions of pnpm and npm are now supported.

Closes:

What's being changed (if available, include any code snippets, screenshots, or gifs):

This PR adds npm 12 and pnpm 11/12 to the overview.

Check off the following:

  • A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
  • The changes in this PR meet the docs fundamentals that are required for all content.
  • All CI checks are passing and the changes look good in the review environment.

Copilot AI max review requested due to automatic review settings October 20, 2026 14:15
@github-actions

github-actions Bot commented Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source Review Production What Changed
code-security/reference/supply-chain-security/dependabot-options-reference.md fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18
fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18
code-security/reference/supply-chain-security/supported-ecosystems-and-repositories.md fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18
fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18
from reusable

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

@github-actions github-actions Bot added the triage Do not begin working on this issue until triaged by the team label Oct 20, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The corresponding options-reference table still lists older versions, leaving contradictory support information.

1 open issue
What changed in this PR

Updates Dependabot’s shared package-manager support table to reflect newly supported versions.

Changes:

  • Adds npm v12.
  • Adds pnpm v11 and v12.
File Description
data/​reusables/​dependabot/​supported-package-managers.md Extends the supported npm and pnpm version lists.

Review effort: Max

Comment thread data/reusables/dependabot/supported-package-managers.md

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

triage Do not begin working on this issue until triaged by the team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants