ST-2026-014 · SDKs, clients & toolchains
Dependabot ends Python 3.9 support and warns update pull requests may stop
GitHub ended Dependabot support for Python 3.9 on 23 June 2026 after the runtime reached end of life and warns that repositories remaining on 3.9 may no longer receive Dependabot dependency-update pull requests.
Previous state
Dependabot could process supported Python 3.9 dependency environments and create dependency-update pull requests for compatible repositories.
Current state
Python 3.9 is outside Dependabot support, and GitHub warns that dependency-update pull requests may not be created until the project moves to a supported Python release.
Affected users
Who needs to care
Repositories whose Dependabot dependency resolution or test metadata still targets Python 3.9.
Required response
What to do
Identify Python 3.9 constraints in project metadata, CI and Dependabot configuration; migrate to a supported Python release; then verify that Dependabot update jobs and pull requests resume successfully.
Evidence boundary
What the source does not prove
GitHub describes a risk that Dependabot will not create pull requests, not a guarantee that every Python 3.9 repository immediately fails. The notice does not define a compatibility exception list.
Lifecycle history
Dated event sequence
- Removal announced
GitHub gave advance notice that Python 3.9 support would end in June.
- Support ended
Dependabot no longer supports Python 3.9.
Evidence ledger
First-party sources
- 01GitHub Changelog — Upcoming deprecation of Python 3.9 for Dependabot
Official advance support notice · 2026-05-19
Open official source ↗ - 02GitHub Changelog — Deprecation of Python 3.9 for Dependabot
Official support-removal confirmation · 2026-06-23
Open official source ↗