GitHub says you can now keep "AI agent skills, prompts, and instructions" up to date with Dependabot version updates for Agent Package Manager (APM). Dependabot opens pull requests to update supported git dependencies declared in apm.yml…
In the News: November 8, 2026 (Midday)
Dependabot can now open pull requests to update the agent skills, prompts and instructions a repository declares in apm.yml.
Midday edition
Machine-readable
Download Markdown
Story
Dependabot now opens pull requests for agent skills and prompts
Read story →
Story
GitHub Agentic Workflows is generally available
GitHub Next's open source project lets you write automation in Markdown for tasks such as issue triage, CI failure analysis, documentation updates and test writing, using Copilot or another coding agent inside GitHub Actions. The Markdown…
Story
GitHub will block `pull_request_target` by default in public repositories
Starting December 2, 2026, GitHub Actions will block pull_request_target events by default in all public repositories unless an Actions event policy explicitly allows them. Enforcement was previously scheduled for November 2.