Skip to content
AI Radar by Wagner Solution
CS
Menu
important Tools and apps

GitHub expands Dependabot with version updates for Agent Package Manager

clearly official source

GitHub has expanded Dependabot with version updates for Agent Package Manager (APM) — the tool keeps versions of AI agent skills, prompts, and instructions in apm.yml up to date via automatic pull requests. These are not security updates. Available on github.com, and also coming to GitHub Enterprise Server 3.24.

GitHub has expanded Dependabot to support version updates for Agent Package Manager (APM) — a tool for managing AI agent skills, prompts, and instructions. Dependabot now opens pull requests to update git dependencies declared in the apm.yml file, and if it exists, it also regenerates apm.lock.yaml. According to GitHub, this support covers only version updates, not security updates.

Setting it up requires adding an apm entry to the .github/dependabot.yml file, specifying the directory containing apm.yml, and choosing an update schedule.

The feature is generally available on github.com for all GitHub plans, and according to GitHub, it is also coming to GitHub Enterprise Server 3.24.

What changed

Why it matters

Teams building AI agents with Agent Package Manager no longer need to manually track dependency versions of skills, prompts, and instructions — Dependabot can now update them automatically via pull requests. However, the feature does not cover security updates, so a different process is needed for that part.

Two audiences, two different impacts

What this means

01

For individuals

Developers working with Agent Package Manager now receive automatic pull requests from Dependabot to update dependency versions in apm.yml, instead of having to track and update versions manually.

What to do Developers using APM should add an apm entry to dependabot.yml with the directory containing apm.yml and set an update schedule.
More practical updates →
02

For a business

For companies that develop AI agents using Agent Package Manager, this reduces the manual burden of keeping skill, prompt, and instruction versions up to date, but security updates are handled by a different mechanism.

Development
What to decide If a team uses Agent Package Manager, add an entry for apm to .github/dependabot.yml and verify the update schedule settings.
More business impacts →
Agent Package Manager AI agents CI/CD Dependabot DevOps GitHub

Check the original

Event sources

clearly official source · 1 publisher, 0 independent. We count feeds from the same owner only once.

1
GitHub Changelog (Copilot and AI features) primary source · first detected Dependabot version updates support Agent Package Manager