# Dependabot Now Supports uv

As of March 13, 2025, [Dependabot officially supports uv](https://github.blog/changelog/2025-03-13-dependabot-version-updates-now-support-uv-in-general-availability/).

[Dependabot](https://docs.github.com/en/code-security/dependabot) monitors repositories for outdated or insecure dependencies and creates pull requests to update them. GitHub's tool supports npm, pip, Maven, Docker, and now [uv](https://pydevtools.com/handbook/reference/uv.md).

> [!NOTE]
> **Update 2026-09-09**: Dependabot [security updates now support uv](https://github.blog/changelog/2025-12-16-dependabot-security-updates-now-support-uv/) as well, so a vulnerability in a `uv.lock` dependency opens a security alert and a fix pull request, not just a version-update one.

## Learn More

- [How to Ignore a Dependency in Dependabot Without Blocking Its Security Updates](https://pydevtools.com/handbook/how-to/how-to-ignore-a-dependency-in-dependabot-without-blocking-security-updates.md)
- [How to Keep a Capped Dependency from Blocking Dependabot Security Updates](https://pydevtools.com/handbook/how-to/how-to-keep-a-capped-dependency-from-blocking-dependabot-security-updates.md)