Tech article
Improved detection for withdrawn Dependabot alerts
Publisher description: You can now more easily detect withdrawn Dependabot alerts. Dependabot withdraws and removes an alert when the advisory or vulnerability that produced it is no longer valid.
github | Oct 13, 2026 | Allison
Automated excerpt
You can now more easily detect withdrawn Dependabot alerts. Two changes help you detect these withdrawals: REST API: Requests to get or update a withdrawn alert now return 410 Gone instead of 404 Not Found, so you can tell a withdrawn alert apart from one that never existed. Learn more about the dependabot_alert webhook event and the REST API endpoints for Dependabot alerts.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.