Correct Dependabot Python package manager versions in docs tables (pipenv constraint + pip-compile) by Copilot · Pull Request #43769 · github/docs

Copilot · 2026-04-09T21:35:32Z

This updates the docs to align Python package manager versions with Dependabot’s current source of truth and corrects regressions from the prior update. Specifically, it restores the <= pipenv constraint and updates pip-compile where it was previously missed.

dependabot-options-reference.md (package-ecosystem table)
- Updated pip from v24.2 → 24.2
- Updated pip-compile from 7.4.1 → 7.5.3
- Preserved pipenv as <= 2024.4.1 (did not remove <=)
- Updated poetry from v2 → 2.2.1
- Left pnpm unchanged
supported-package-managers.md (reusable package managers table)
- Updated pip from v21.1.2 → 24.2
- Updated pipenv from <= 2021-05-29 → <= 2024.4.1 (preserving <=)
- Updated pip-compile from 6.1.0 → 7.5.3
- Updated poetry from v1 → 2.2.1
- Kept all non-version columns unchanged

Example of corrected rows

| pip         | `pip` | 24.2        |
| pip-compile | `pip` | 7.5.3       |
| pipenv      | `pip` | <= 2024.4.1 |
| poetry      | `pip` | 2.2.1       |

Original prompt

Context

This is a corrective fix for PR #43699 which updates the dependabot Python package manager versions in the docs to match the actual source of truth at https://github.com/dependabot/dependabot-core/blob/main/python/helpers/requirements.txt

The source of truth (requirements.txt) contains:

pip==24.2
pip-tools==7.5.3
pipenv==2024.4.1
poetry==2.2.1

PR #43699 had two issues:

It accidentally removed the <= prefix from pipenv in dependabot-options-reference.md
It did not update pip-compile (which uses pip-tools) at all

Changes required

File 1: `content/code-security/reference/supply-chain-security/dependabot-options-reference.md`

In the package-ecosystem table (around lines 572-576 on main), update the following rows:

Current (on main):

| pip| `pip`            | v24.2          |
| pip-compile | `pip`            | 7.4.1            |
| pipenv         | `pip`            | <= 2024.4.1    |
| pnpm   | `npm`            | v7, v8 <br>v9, v10 (version updates only)    |
| poetry         | `pip`            | v2               |

Should become:

| pip         | `pip`            | 24.2             |
| pip-compile | `pip`            | 7.5.3            |
| pipenv      | `pip`            | <= 2024.4.1      |
| pnpm   | `npm`            | v7, v8 <br>v9, v10 (version updates only)    |
| poetry      | `pip`            | 2.2.1            |

Key points for this file:

pip: Remove v prefix from version, change v24.2 to 24.2
pip-compile: Update version from 7.4.1 to 7.5.3
pipenv: KEEP the <= prefix. The version <= 2024.4.1 is already correct on main. Do NOT remove <=.
poetry: Update from v2 to 2.2.1
Do NOT change the pnpm row

File 2: `data/reusables/dependabot/supported-package-managers.md`

In the package managers table (around lines 41-45 on main), update the following rows:

Current (on main):

[pip](#pip-and-pip-compile) | `pip`            | v21.1.2          | ...
pipenv         | `pip`            | <= 2021-05-29    | ...
[pip-compile](#pip-and-pip-compile) | `pip`            | 6.1.0            | ...

and

poetry         | `pip`            | v1               | ...

Should become:

[pip](#pip-and-pip-compile) | `pip`            | 24.2             | ...
pipenv         | `pip`            | <= 2024.4.1      | ...
[pip-compile](#pip-and-pip-compile) | `pip`            | 7.5.3            | ...

and

poetry         | `pip`            | 2.2.1            | ...

Key points for this file:

pip: Change v21.1.2 to 24.2
pipenv: Change <= 2021-05-29 to <= 2024.4.1 (keep the <= prefix!)
pip-compile: Change 6.1.0 to 7.5.3
poetry: Change v1 to 2.2.1
Do NOT change any other columns in these rows (the octicon check/x columns must stay the same)

Important notes

The <= prefix on pipenv MUST be preserved in both files
pip-compile must be updated in both files (this was missed in the original PR fix dependabot python package manager versions #43699)
Only version numbers should change — do not alter any other table structure or content
Fixes issue Outdated dependabot python package manager versions #43697

The following is the prior conversation context from the user's chat exploration (may be truncated):

User: Help me review and confirm the pull request by checking the code ? @github/docs/pull/43699

Assistant:

I'll start by loading the PR review abilities and then gather information about this pull request.

Assistant: Now let me verify the claimed versions against the actual source of truth in dependabot-core:

Assistant: Now I have all the data I need. Let me verify the version claims against the source of truth.

PR Review: fix dependabot python package manager versions

Summary


Author	@djbrown (Contributor)
State	Open, not draft
Fixes	#43697 — "Outdated dependabot python package manager versions"
Files changed	2 (+6, −6)
Reviews	None yet
CI	All checks passing ✅
Mergeable	Yes (blocked — awaiting review)
Risk	🟢 Low — content-only version number corrections

A GitHub staff member (@Sharra-writes) has commented that they've asked the Dependabot team for feedback and is waiting on a response.

Core Changes — Version Accuracy Verification

The PR updates Python-related package manager versions in the docs to match the actual versions defined in dependabot/dependabot-core/python/helpers/requirements.txt.

I verified the source of truth. Here is the comparison:

Package	Old (docs)	New (PR)	Actual (`requirements.txt`)	✅/⚠️
pip	`v24.2` / `v21.1.2`	`24.2`	`pip==24.2`	✅ Match...

This pull request was created from Copilot chat.

Agent-Logs-Url: https://github.com/github/docs/sessions/3b95ad1e-aafa-4c4f-b902-0aa6e25154c6 Co-authored-by: kbukum1 <171620528+kbukum1@users.noreply.github.com>

e7457166-a11y · 2026-05-03T07:40:12Z

https://github.com/e7457166-a11y

e7457166-a11y · 2026-05-03T07:49:16Z

github-mcp-server --toolsets repos,issues,pull_requests

awarraich463-code

About GitHub Importer

If your source code is stored on another Git-based hosting service, you can move the code to GitHub.com using GitHub Importer.

About GitHub Importer

GitHub Importer is a tool that quickly imports Git repositories from other hosting services to GitHub.com.

To get started with GitHub Importer, see Importing a repository with GitHub Importer.

Capabilities and limitations of GitHub Importer

GitHub Importer imports the source code and commit history of a repository. It does not import other associated data from the hosting service, such as issues and pull requests.
GitHub Importer is only available on GitHub.com.
During an import, you can authenticate with your remote repository. The repository must be accessible from the public internet. If the repository is hosted on a private network, GitHub Importer won't be able to access it.
GitHub Importer does not support repositories that use version control systems other than Git, such as Mercurial, Subversion, or Team Foundation Version Control (TFVC). For more information about alternatives to GitHub Importer, see About source code imports using the command line.
Repositories and individual files on GitHub are subject to size limits. For more information, see About large files on GitHub.
GitHub Importer does not move Git Large File Storage (LFS) objects from the source repository to the target repository. If you use Git LFS, you will need to either convert the Git LFS objects to regular files tracked by Git before running the migration, or move the Git LFS objects to the new repository separately after running the migration.

Plans for GitHub Copilot

Learn about the available plans for Copilot.

[!IMPORTANT] Starting June 1, 2026, GitHub is moving Copilot from request-based billing to usage-based billing. See Usage-based billing for organizations and enterprises and Usage-based billing for individuals.

Important

Starting April 20, 2026, new sign-ups for Copilot Pro, Copilot Pro+, and student plans are temporarily paused.
Starting April 22, 2026, new self-serve sign-ups for Copilot Business for organizations on GitHub Free and GitHub Team plans are temporarily paused.

GitHub offers several plans for GitHub Copilot, depending on your needs and whether you're using Copilot as an individual or as part of an organization or enterprise.

GitHub Copilot Free is available to individual developers who don't have access to Copilot through an organization or enterprise. This free plan includes limited access to select Copilot features, allowing you to try AI-powered coding assistance at no cost.
GitHub Copilot Student is available to verified students. The plan includes unlimited completions, access to premium models in Copilot Chat, access to Copilot cloud agent, and a monthly allowance of premium requests.
GitHub Copilot Pro is designed for individuals who want more flexibility. This paid plan includes unlimited completions, access to premium models in Copilot Chat, access to Copilot cloud agent, and a monthly allowance of premium requests. Verified teachers, and maintainers of popular open source projects may be eligible for free access.
GitHub Copilot Pro+ includes, in addition to everything in Copilot Pro, a larger allowance of premium requests, and full access to all available models in Copilot Chat. Ideal for AI power users who want access to the most advanced capabilities.
GitHub Copilot Business is for organizations on GitHub Free or GitHub Team plan, or enterprises on GitHub Enterprise Cloud. This plan includes Copilot cloud agent and enables centralized management and Copilot policy control for organization members.
GitHub Copilot Enterprise is for enterprises using GitHub Enterprise Cloud. It includes all the features of Copilot Business, plus additional enterprise-grade capabilities. Enterprise owners can assign Copilot Enterprise or Copilot Business to individual organizations, or assign Copilot Business directly to users and teams.

Copilot is not currently available for GitHub Enterprise Server.

Comparing Copilot plans

The tables below show the features available in each Copilot plan.

	Copilot Free	Copilot Student	Copilot Pro	Copilot Pro+	Copilot Business	Copilot Enterprise
Pricing	Not applicable	Free	$10 USD per month (free for some users)	$39 USD per month	$19 USD per granted seat per month	$39 USD per granted seat per month
Premium requests	50 per month	300 per month	300 per month	1500 per month	300 per user per month	1000 per user per month
Purchase additional premium requests at $0.04/request

Agents

Agents	Copilot Free	Copilot Student	Copilot Pro	Copilot Pro+	Copilot Business	Copilot Enterprise
Copilot cloud agent
Agent mode
Copilot code review	Only "Review selection" in VS Code
Model Context Protocol (MCP)
Third-party Agents (public preview)

Chat

Chat	Copilot Free	Copilot Student	Copilot Pro	Copilot Pro+	Copilot Business	Copilot Enterprise
Copilot Chat in IDEs¹ ²	50 messages per month	Unlimited with included models	Unlimited with included models	Unlimited with included models	Unlimited with included models	Unlimited with included models
Inline chat
Slash commands
Copilot Chat in GitHub Mobile
Copilot Chat in GitHub
Copilot Chat in Windows Terminal
Increased GitHub Models rate limits³
Copilot Chat skills in IDEs⁴

Models

[!NOTE] For Copilot Student, GPT-5.3-Codex is not available in the model picker, but remains available through auto model selection.

Available models in chat	Copilot Free	Copilot Student	Copilot Pro	Copilot Pro+	Copilot Business	Copilot Enterprise

Inline suggestions

Inline suggestions	Copilot Free	Copilot Student	Copilot Pro	Copilot Pro+	Copilot Business	Copilot Enterprise
Real-time code suggestions with included models⁵	2000 completions per month
Next edit suggestions

Customization

Customization	Copilot Free	Copilot Student	Copilot Pro	Copilot Pro+	Copilot Business	Copilot Enterprise
Repository and personal custom instructions
Organization custom instructions
Prompt files
Model Context Protocol (MCP)
Block suggestions matching public code
Exclude specified files from Copilot
Organization-wide policy management

Other features

	Copilot Free	Copilot Student	Copilot Pro	Copilot Pro+	Copilot Business	Copilot Enterprise
Copilot pull request summaries
Audit logs
Content exclusion
Copilot CLI
GitHub Spark (public preview)

For more information, see GitHub Copilot features.

Ready to choose a plan?

Start using Copilot by signing up for the plan that best fits your needs.

Important

Starting April 20, 2026, new sign-ups for Copilot Pro, Copilot Pro+, and student plans are temporarily paused.
Starting April 22, 2026, new self-serve sign-ups for Copilot Business for organizations on GitHub Free and GitHub Team plans are temporarily paused.

Copilot Free — Try Copilot with limited features and requests. Start using Copilot Free.
GitHub Copilot Student — Get access to Copilot's premium features for free. Access GitHub Copilot Student.
Copilot Pro — Get unlimited completions and access to premium models. Subscribe to Copilot Pro.
Copilot Pro+ — Unlock advanced AI models, extended request limits, and extra capabilities. Subscribe to Copilot Pro+.
Copilot Business — For teams and organizations. Contact Sales.
Copilot Enterprise — For enterprises that need advanced features and centralized management. Contact Sales.

Copilot Chat in IDEs is available in Visual Studio Code, Visual Studio, JetBrains IDEs, Eclipse, and Xcode. ↩
Response times may vary during periods of high usage. ↩
For details about the increased rate limits, see Prototyping with AI models. ↩
Copilot Chat skills in IDEs is available in Visual Studio Code and Visual Studio. ↩
Inline suggestions in IDEs is available in Visual Studio Code, Visual Studio, JetBrains IDEs, Azure Data Studio, Xcode, Vim/Neovim, and Eclipse. ↩

Initial plan

b975982

Copilot AI assigned Copilot and kbukum1 Apr 9, 2026

Copilot started work on behalf of kbukum1 April 9, 2026 21:35 View session

fix dependabot python package manager versions in docs tables

cd64f5d

Agent-Logs-Url: https://github.com/github/docs/sessions/3b95ad1e-aafa-4c4f-b902-0aa6e25154c6 Co-authored-by: kbukum1 <171620528+kbukum1@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix pipenv and pip-tools versions in dependabot options reference~~ Correct Dependabot Python package manager versions in docs tables (pipenv constraint + pip-compile) Apr 9, 2026

Copilot AI requested a review from kbukum1 April 9, 2026 21:40

Copilot stopped work on behalf of kbukum1 due to an error April 9, 2026 21:40
The "Index fixtures into the local Elasticsearch" custom setup step from your .github/workflows/copilot-setup-steps.yml file failed.

awarraich463-code reviewed May 6, 2026

View reviewed changes

Mac90lv reviewed May 7, 2026

View reviewed changes

This was referenced May 8, 2026

Greaat e7457166-a11y/https-github.com-e7457166-a11y#20

Open

Greaat e7457166-a11y/https-github.com-e7457166-a11y#21

Open

Greaat e7457166-a11y/https-github.com-e7457166-a11y#22

Open

e7457166-a11y reviewed May 8, 2026

View reviewed changes

otsvikash343-prog reviewed May 16, 2026

View reviewed changes

e7457166-a11y reviewed May 21, 2026

View reviewed changes

Conversation

Copilot AI commented Apr 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Context

Changes required

File 1: content/code-security/reference/supply-chain-security/dependabot-options-reference.md

File 2: data/reusables/dependabot/supported-package-managers.md

Important notes

PR Review: fix dependabot python package manager versions

Summary

Core Changes — Version Accuracy Verification

Uh oh!

e7457166-a11y commented May 3, 2026

Uh oh!

e7457166-a11y commented May 3, 2026

Uh oh!

awarraich463-code left a comment

Choose a reason for hiding this comment

About GitHub Importer

About GitHub Importer

Capabilities and limitations of GitHub Importer

Further reading

Uh oh!

Mac90lv left a comment

Choose a reason for hiding this comment

Uh oh!

e7457166-a11y left a comment

Choose a reason for hiding this comment

Uh oh!

otsvikash343-prog left a comment

Choose a reason for hiding this comment

Uh oh!

e7457166-a11y commented May 17, 2026

Uh oh!

e7457166-a11y commented May 18, 2026

Uh oh!

e7457166-a11y left a comment

Choose a reason for hiding this comment

Uh oh!

e7457166-a11y left a comment

Choose a reason for hiding this comment

Uh oh!

e7457166-a11y commented May 21, 2026

Uh oh!

adekhibek-cmyk commented May 24, 2026

Uh oh!

adekhibek-cmyk commented May 24, 2026

Plans for GitHub Copilot

Comparing Copilot plans

Agents

Chat

Models

Inline suggestions

Customization

Other features

Ready to choose a plan?

Footnotes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

Copilot AI commented Apr 9, 2026 •

edited

Loading

File 1: `content/code-security/reference/supply-chain-security/dependabot-options-reference.md`

File 2: `data/reusables/dependabot/supported-package-managers.md`