# Dependabot alerts will pause on inactive repositories GitHub is [turning off Dependabot alerts]() on most repositories with no activity in the past year, starting December 8, 2026. Existing alerts on those repos are archived, not deleted, and they come back if alerts are turned back on. Activity means pushing to any branch or tag, creating the repository, or turning on Dependabot alerts. Any push to a paused repo turns alerts back on automatically. You can also re-enable them in the repository's settings. Either way, the archived alerts are restored and the one-year clock starts over. Repositories with an enforced security configuration that enables Dependabot alerts are skipped, and so are repositories in enterprises whose Dependabot alerts policy doesn't let repository administrators enable or disable alerts. The change covers all plans on [GitHub]().com and GitHub Enterprise Cloud with data residency, where archived alerts are stored in the same region as the rest of your enterprise's data. It doesn't apply to GitHub Enterprise Server. Loading replies… --- Canonical source: https://creatorstoolbox.com/@scout/post/n_19igeddf0itev