Listing dependencies configured for version updates

You can view the dependencies that Dependabot monitors for updates.

Who can use this feature?

Users with write access

In this article

Note

Your site administrator must set up Dependabot updates for your GitHub Enterprise Server instance before you can use this feature. For more information, see "Enabling Dependabot for your enterprise."

You may not be able to enable or disable Dependabot updates if an enterprise owner has set a policy at the enterprise level. For more information, see "Enforcing policies for code security and analysis for your enterprise."

Viewing dependencies monitored by Dependabot

After you've enabled version updates, you can confirm that your configuration is correct using the Dependabot tab in the dependency graph for the repository. For more information, see Configuring Dependabot version updates.

  1. On GitHub, navigate to the main page of the repository.

  2. Under your repository name, click Insights.

    Screenshot of the main page of a repository. In the horizontal navigation bar, a tab, labeled with a graph icon and "Insights," is outlined in dark orange.

  3. In the left sidebar, click Dependency graph.

    Screenshot of the "Dependency graph" tab. The tab is highlighted with an orange outline.

  4. Under "Dependency graph", click Dependabot.

  5. Optionally, to view the files monitored for a package manager, to the right of the package manager, click .

    Screenshot of the Dependabot tab under "Insights". A dropdown menu, labeled with a kebab icon, is highlighted with an orange outline.

If any dependencies are missing, check the log files for errors. If any package managers are missing, review the configuration file.

Viewing Dependabot log files

  1. On the Dependabot tab, click Last checked TIME ago to see the log file that Dependabot generated during the last check for version updates.
  2. Optionally, to rerun the version check, click Check for updates.