Dependabot alerts REST API now includes dependency versions
GitHub announced that Dependabot alert responses in the REST API now include the version of the vulnerable dependency. Each alert's dependency object includes a new version_requirement field.
Why it matters
Developers and teams using the Dependabot alerts REST API can retrieve the vulnerable dependency version directly from alert responses, without additional lookups. This can simplify automated triage and remediation scripts.
Who should care
Developers, DevOps and security engineers who integrate with the GitHub REST API or automate Dependabot alert handling.
What you can do
Update any scripts or integrations that consume Dependabot alerts to read the new version_requirement field from each alert's dependency object.