Skip to main content
GitHub

Disruption with Dependabot Alerts

Degraded Lasted 3h 53m · started · GitHub's page

Level
confirmed
Worst impact
Degraded
Down Index
20of 100

What to do

  • Check whether your product depends on GitHub. Check your stack

    Paste a package.json, lockfile, Terraform or a list of domains at down.guide/stack to see every provider you depend on.
  • Confirm your retries, queues and scheduled jobs caught up after the 3h 53m it lasted.

    Anything that failed between 2026-10-23 14:58 UTC and 2026-10-23 18:51 UTC may need a replay.
  • Subscribe to GitHub's feed to hear about the next one first. RSS feed

    https://down.guide/feed?provider=github works in Slack (/feed subscribe), Discord feed bots and any RSS reader.

Updates from GitHub 8

  1. investigating

    We are investigating reports of impacted performance for some GitHub services.

    provider

  2. investigating

    We’re investigating delays in some Dependabot alerts closing after affected repositories have been updated to address a vulnerability. Alert processing is backed up. We’ll share more information as it becomes available.

    provider

  3. investigating

    We’re scaling alert processing capacity to reduce the backlog causing delays in some Dependabot alerts closing after affected repositories have been updated. We’re continuing to monitor and will share another update as more information becomes available.

    provider

  4. investigating

    We’re continuing to investigate delays in some Dependabot alerts closing after affected repositories are updated. Alert processing remains backed up, and additional processing capacity is rolling out to help reduce the backlog. We’re monitoring the rollout and will share another update as we learn more.

    provider

  5. investigating

    We’re continuing to investigate delays in some Dependabot alerts closing after affected repositories are updated. Alert processing remains backed up, and additional processing capacity is rolling out to help reduce the backlog. We’re monitoring progress and will share another update as we learn more.

    provider

  6. investigating

    Some Dependabot alerts continue to be delayed in closing after repository updates address a vulnerability. We're continuing to investigate and work to restore normal processing.

    provider

  7. monitoring

    The degradation has been mitigated. We are monitoring to ensure stability.

    provider

  8. resolved

    We identified that an advisory-publication driven fan-out was overwhelming Dependabot alert processing on repositories by saturating the queue with its own events, delaying processing of events related to repository pushes. We have now isolated this fan-out and applied a throttle so it runs at a fixed rate and cannot delay other events. This remediation has successfully prevented a new fan-out process impacting users.

    provider

Reports count in aggregate; nothing about you is shown.

Corrections

None so far.

Something wrong on this page? Report an error or send us a note. Every fix is listed here.

Questions about DWN-cbb360e174

Is GitHub still down?

No, this incident was resolved 2026-10-23 18:51 UTC. For GitHub's live state, see https://down.guide/github.

How long did it last?

3h 53m, from 2026-10-23 14:58 UTC to 2026-10-23 18:51 UTC, by the times GitHub posted.

What caused it?

GitHub hasn't published a root cause. If it does, it shows here.

Where does this come from?

GitHub's official status page, https://www.githubstatus.com, quoted verbatim. down.guide's own probes, reports and social counts are labeled as ours.