--- title: "Automatic Dependabot access to GitHub-hosted registries" url: https://daily.dev/posts/automatic-dependabot-access-to-github-hosted-registries-l3b8qstfa source_url: https://github.blog/changelog/2026-06-23-automatic-dependabot-access-to-github-hosted-registries type: article source: "GitHub Changelog" published: 2026-06-23T17:00:27.696Z updated: 2026-06-23T17:00:44.504Z tags: ["github-actions", "dependabot"] reading_time: 1 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Automatic Dependabot access to GitHub-hosted registries **[GitHub Changelog](https://daily.dev/sources/github_updates)** · 1 min read · 0 upvotes · 0 comments ## Summary Dependabot can now authenticate to private GitHub Packages registries automatically using its built-in GITHUB_TOKEN with packages: read permission, eliminating the need for personal access tokens (PATs). Any package that has granted repository access via "Manage Actions access" in package settings will accept the token, just like a regular GitHub Actions workflow. To enable it, add the repository running Dependabot with Read access under the package's "Manage Actions access" settings — no changes to dependabot.yml required, and existing PAT-based registry entries can be removed. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Agentic workflows no longer need a personal access token](https://daily.dev/posts/agentic-workflows-no-longer-need-a-personal-access-token-yztqlwbhg) · GitHub Changelog · 1 upvotes · 0 comments - [Copilot CLI no longer needs a personal access token in GitHub Actions](https://daily.dev/posts/copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions-tkqt02whe) · GitHub Changelog · 0 upvotes · 0 comments - [The Dependabot Proxy is now open source with an MIT license](https://daily.dev/posts/the-dependabot-proxy-is-now-open-source-with-an-mit-license-gcl7f5nxs) · GitHub Changelog · 0 upvotes · 0 comments --- Tags: [#github-actions](https://daily.dev/tags/github-actions), [#dependabot](https://daily.dev/tags/dependabot) [View this post on daily.dev](https://daily.dev/posts/automatic-dependabot-access-to-github-hosted-registries-l3b8qstfa)