Dependabot adds support for npm 12, pnpm 11 and 12, and Bun 1.4
GitHub's changelog confirms Dependabot now tracks dependency updates on these newer package manager versions, clearing a blocker for anyone who held back an upgrade.
GitHub says Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4. Projects on those versions can upgrade without losing automated dependency updates, something that was not guaranteed before this release.
The change is live for all github.com users today, and GitHub says it will ship in GitHub Enterprise Server 3.24 for self-hosted instances. GitHub points to its supported ecosystems documentation for the full version matrix rather than listing every supported range in the changelog itself.
Why it matters: Dependabot support has lagged package manager releases before, which leaves teams stuck choosing between a newer runtime and automated security updates. If you have been pinned to an older npm, pnpm or Bun release for that reason, this removes the excuse.
# check what Dependabot currently tracks in your repo
cat .github/dependabot.yml