Improvement

December 16, 20251 Minute Read

Conda ecosystem support for Dependabot version updates now generally available

Dependabot now supports parsing and updating environment.yml Conda environment specification files. This release includes version updates for Conda-based projects.

Why it matters

Many projects rely on Conda for managing dependencies and environments. Extending Dependabot’s support to Conda allows teams who use Conda to benefit from automated dependency management. Organizations can more effectively keep their Conda-based environments up to date, reducing the risk of vulnerabilities and improving their project security.

Details

Dependabot will detect Conda environment files and create update pull requests. These updates cover version updates for dependencies listed in the Conda manifest files.

To help you get started, full documentation, examples, and usage notes are available in the Dependabot documentation.

Availability

This capability is available on github.com today and will be coming to GitHub Enterprise Server (GHES) with version 3.21.

Join the discussion within the Dependabot Community.

Subscribe to our developer newsletter

Discover tips, technical guides, and best practices in our biweekly newsletter just for devs.

By submitting, I agree to let GitHub and its affiliates use my information for personalized communications, targeted advertising, and campaign effectiveness. See the GitHub Privacy Statement for more details.

Conda ecosystem support for Dependabot version updates now generally available - GitHub Changelog