Dependabot on GitHub Actions and self-hosted runners is now generally available
Blog post from GitHub
GitHub has enabled administrators to run Dependabot update jobs as GitHub Actions workflows, utilizing both hosted and self-hosted runners, which do not count towards GitHub Actions minutes, keeping the service free. This shift allows Dependabot to access on-premises resources like private registries, improving flexibility and performance by integrating with GitHub Actions infrastructure. Users can now see logs in a centralized location, enhancing visibility and troubleshooting, while APIs and webhooks can detect failed runs for downstream processing in CI/CD pipelines. The transition to GitHub Actions is expected to be seamless for most users, with ongoing improvements like faster runs and expanded configuration options planned. GitHub encourages feedback through community discussions as it continues to enhance Dependabot's capabilities.