Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4
By Steven Van ·
Dependabot updates now cover the newer package manager versions on github.com, and they will arrive in GitHub Enterprise Server 3.24.
Dependabot now works with npm 12, pnpm 11 and 12, and Bun 1.4, so projects can move to those package manager versions and keep receiving updates. GitHub ships the support in its supported ecosystems documentation and release note.
Availability
Support for these versions is available to all github.com users. It will be included in GitHub Enterprise Server 3.24.
Where the full list lives
The supported ecosystems page lists every package manager version Dependabot handles. Both npm and pnpm are configured with the npm YAML value in dependabot.yml, and Bun uses bun. For Bun, Dependabot supports the text-based bun.lock file (version 1.1.39 and above) but not the legacy binary bun.lockb.
