# Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4

By Steven Van · 2026-10-20

Dependabot updates now cover the newer package manager versions on github.com, and they will arrive in GitHub Enterprise Server 3.24.

Dependabot now works with **npm 12**, **pnpm 11 and 12**, and **Bun 1.4**, so projects can move to those package manager versions and keep receiving updates. [GitHub](<https://creatorstoolbox.com/tools/github>) ships the support in its [supported ecosystems documentation](<https://docs.github.com/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories#supported-ecosystems-maintained-by-github>) and release note.

## Availability

Support for these versions is available to all github.com users. It will be included in GitHub Enterprise Server 3.24.

## Where the full list lives

The supported ecosystems page lists every package manager version Dependabot handles. Both npm and pnpm are configured with the npm YAML value in dependabot.yml, and Bun uses bun. For Bun, Dependabot supports the text-based bun.lock file (version 1.1.39 and above) but not the legacy binary bun.lockb.

[![](<https://github.com/user-attachments/assets/e9abaf25-6852-4b4a-a7f5-e6e8d1dcdbbd>)](<https://docs.github.com/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories#supported-ecosystems-maintained-by-github>)

![GitHub](<https://github.githubassets.com/assets/GitHub-Mark-ea2971cee799.png>)

GitHub

Where the world builds software — Git hosting, pull requests, issues, Actions CI/CD, and Copilot, free for public and private repos.

[View GitHub →](<https://creatorstoolbox.com/tools/github>)

[Original source](<https://github.blog/changelog/2026-10-20-dependabot-now-supports-npm-12-pnpm-11-and-12-and-bun-1-4>)

[Read Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4 on Creators Toolbox](<https://creatorstoolbox.com/blog/github-dependabot-now-supports-npm-12-pnpm-11-and-12-and-bun-1-4>)

---
Canonical source: https://creatorstoolbox.com/blog/github-dependabot-now-supports-npm-12-pnpm-11-and-12-and-bun-1-4