GitHub: Disruption with Dependabot Alerts
Timeline of updates
- investigating
We are investigating reports of impacted performance for some GitHub services.
- investigating
We’re investigating delays in some Dependabot alerts closing after affected repositories have been updated to address a vulnerability. Alert processing is backed up. We’ll share more information as it becomes available.
- investigating
We’re scaling alert processing capacity to reduce the backlog causing delays in some Dependabot alerts closing after affected repositories have been updated. We’re continuing to monitor and will share another update as more information becomes available.
- investigating
We’re continuing to investigate delays in some Dependabot alerts closing after affected repositories are updated. Alert processing remains backed up, and additional processing capacity is rolling out to help reduce the backlog. We’re monitoring the rollout and will share another update as we learn more.
- investigating
We’re continuing to investigate delays in some Dependabot alerts closing after affected repositories are updated. Alert processing remains backed up, and additional processing capacity is rolling out to help reduce the backlog. We’re monitoring progress and will share another update as we learn more.
- investigating
Some Dependabot alerts continue to be delayed in closing after repository updates address a vulnerability.
We're continuing to investigate and work to restore normal processing. - monitoring
The degradation has been mitigated. We are monitoring to ensure stability.
- resolved
This incident has been resolved. Thank you for your patience and understanding as we addressed this issue. A detailed root cause analysis will be shared as soon as it is available.
Changes Rewindex caught on this incident
- Incident updated: Disruption with Dependabot Alerts
- Incident updated: Disruption with Dependabot Alerts
- Incident updated: Disruption with Dependabot Alerts
- Incident updated: Disruption with Dependabot Alerts
- Incident updated: Disruption with Dependabot Alerts
- Incident updated: Disruption with Dependabot Alerts
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
First version captured
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
a089074fe5bd6af9…Version 2 captured
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
b4f15e26a62e0eb7…Version 3 captured
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
0b130dba9ecf4571…Version 4 captured
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
09b7eb0408840168…Version 5 captured
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
939cc3685e90f26a…Version 6 captured
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
7fd89188b0075dd1…Version 7 captured
In the 2026-10-23 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
fcb0c63bcd1bdb61…
Impact, status and times are the vendor’s own, as last archived. View on www.githubstatus.com (opens in new tab).