Dependabot support for Gradle lockfiles is now generally available

Dependabot now supports Gradle dependency lockfiles!

What’s new

• Dependabot can now read and update gradle.lockfile in addition to build.gradle.
• This feature is generally available and enabled by default; no additional configuration is required.
• This provides more precise dependency management for Gradle projects that rely on lockfiles for reproducible builds.

Why this matters

Gradle lockfiles ensure that your builds are reproducible by locking specific versions of transitive dependencies. With this update, Dependabot can now work seamlessly with projects that use this best practice, maintaining the integrity of your dependency locks while keeping your dependencies up to date.

Getting started

No additional configuration needed! If your Gradle project uses lockfiles, Dependabot will automatically detect and update them alongside your build files.

Please join the discussion to learn more or engage with the Dependabot community on the topic of Gradle lockfiles.