Skip to content

Dependency graph now supports the Poetry package manager

Dependency graph now supports detecting Python dependencies in repositories that use the Poetry package manager. Dependencies will be detected from both pyproject.toml
and poetry.lock manifest files. We will detect dependencies from existing manifest files over the next few weeks, or sooner if the manifest file is updated.

Learn more about dependency dependency graph

Repository Advisories Support Multiple Affected Products

If you are posting or editing a draft repository Security Advisory and the vulnerability impacts multiple packages and/or ecosystems, you can now identify all applicable affected products in the advisory.

In the past, users needed to publish multiple advisories for the same vulnerability because they could only select one ecosystem and package per advisory.

Add affected product

See more

Improvements to GitHub Releases – generally available

GitHub is where developers come to learn and celebrate what’s new in open source, and where maintainers share, collaborate and celebrate their community’s work. Starting today, two improvements to the release process on GitHub are generally available:

  • Maintainers can now automatically generate release notes, giving them a summary of all the pull requests for a given release.
  • The Releases UI refresh gives more clarity into what’s included in a given release and recognition for contributors in the community. We’ve also significantly overhauled pagination and introduced new search functionality.

Learn more about auto-generated release notes.

See more
View all changes