Dependabot support for virtual network (vNet) and Actions Runner Controller (ARC) is generally available

Dependabot is now generally available for execution on self-hosted GitHub Actions runners managed within Kubernetes clusters using the Actions Runner Controller (ARC). This setup provides auto-scaling, workload isolation, and improved resource management for Dependabot jobs. This ensures dependency updates run efficiently within an organization’s controlled infrastructure while integrating seamlessly with GitHub Actions.

Additionally, Dependabot support for running within a virtual network (vNet) in both self-hosted and GitHub-hosted runner environments is now generally available. This enhancement enables secure, isolated dependency updates with network-level governance.

Key details

• Actions Runner Controller (ARC): ARC is a Kubernetes operator that simplifies the deployment, scaling, and lifecycle management of self-hosted Actions runners in Kubernetes clusters. It dynamically provisions runners based on workflow demand. Learn more in the ARC repository.

• Virtual Network (vNet): A vNet is an Azure Virtual Network that provides enhanced security, network isolation, and private connectivity for runners deployed in a controlled environment. It allows actions runners to securely access internal resources while maintaining network-level governance. Explore more in the Azure Virtual Network documentation.

• To learn more about Dependabot with GitHub Actions, check out this blog post.

• To get started, check out the Dependabot docs.