Conda ecosystem support for Dependabot version updates now generally available
Dependabot now supports parsing and updating environment.yml Conda environment specification files. This release includes version updates for Conda-based projects.
Why it matters
Many projects rely on Conda for managing dependencies and environments. Extending Dependabot’s support to Conda allows teams who use Conda to benefit from automated dependency management. Organizations can more effectively keep their Conda-based environments up to date, reducing the risk of vulnerabilities and improving their project security.
Details
Dependabot will detect Conda environment files and create update pull requests. These updates cover version updates for dependencies listed in the Conda manifest files.
To help you get started, full documentation, examples, and usage notes are available in the Dependabot documentation.
Availability
This capability is available on github.com today and will be coming to GitHub Enterprise Server (GHES) with version 3.21.
Join the discussion within the Dependabot Community.

Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.
