Listing dependencies configured for version updates

You can view the dependencies that Dependabot monitors for updates.

Who can use this feature?

Users with write access

In this article

Note

Your site administrator must set up Dependabot updates for your GitHub Enterprise Server instance before you can use this feature. For more information, see "Enabling Dependabot for your enterprise."

You may not be able to enable or disable Dependabot updates if an enterprise owner has set a policy at the enterprise level. For more information, see "Enforcing policies for code security and analysis for your enterprise."

Viewing dependencies monitored by Dependabot

After you've enabled version updates, you can confirm that your configuration is correct using the Dependabot tab in the dependency graph for the repository. For more information, see "Configuring Dependabot version updates."

  1. On GitHub, navigate to the main page of the repository.

  2. Under your repository name, click Insights.

    Screenshot of the main page of a repository. In the horizontal navigation bar, a tab, labeled with a graph icon and "Insights," is outlined in dark orange.

  3. In the left sidebar, click Dependency graph.

    Screenshot of the "Dependency graph" tab. The tab is highlighted with an orange outline.

  4. Under "Dependency graph", click Dependabot.

  5. Optionally, to view the files monitored for a package manager, to the right of the package manager, click .

    Screenshot of the Dependabot tab under "Insights". A dropdown menu, labeled with a kebab icon, is highlighted with an orange outline.

If any dependencies are missing, check the log files for errors. If any package managers are missing, review the configuration file.

Viewing Dependabot log files

The job logs list is accessible from the dependency graph of a repository. From the dependency graph, click the Dependabot tab, then to the right of the affected manifest file, click Recent update jobs.

To view the full logs files for a particular job, to the right of the log entry you are interested in, click view logs.

Screenshot of a Dependabot job log entry for the Gemfile package manager. A button, called "View logs", is highlighted in a dark orange outline.

For more information, see "Viewing Dependabot job logs."