GitHub Announces General Availability of Dependabot Support for Agent Package Manager
GitHub has extended Dependabot's version update capabilities to support Agent Package Manager (APM), enabling automated pull requests for updating AI agent skills, prompts, and instructions.
On November 3, 2026, GitHub announced that its dependency management tool, Dependabot, now officially supports Agent Package Manager (APM). This update allows developers to use Dependabot to automatically create pull requests (PRs) for updating AI agent components managed by APM, including skills, prompts, and instructions.
APM is a tool designed to manage dependencies for AI agents within projects, allowing developers to specify sources and versions for required skills in an apm.yml file. With Dependabot's APM support enabled, the system checks Git dependencies declared in apm.yml and generates update PRs when new versions are available. If an apm.lock.yaml file exists in the project, Dependabot also regenerates this lock file to ensure consistent versions of AI agent components across teams.
The feature is currently generally available on github.com for all plans and is expected to be included in GitHub Enterprise Server 3.24. Note that this support covers version updates only and does not include security vulnerability alerts or fixes.