# dependabot_alerts_enabled_for_new_repositories on PATCH /orgs/{} stops working

Calls to PATCH /orgs/{id}, body parameter dependabot_alerts_enabled_for_new_repositories on GitHub REST API stopped working on April 21, 2026.

On April 21, 2026, the GitHub REST API removed support for the dependabot_alerts_enabled_for_new_repositories body parameter on PATCH /orgs/{id}. Calls including this parameter fail since that date. The change was announced on March 24, 2026.

## What to use instead

Use code security configurations (/orgs/{org}/code-security/configurations) and set a default configuration for new repositories.

- API: GitHub REST API (api.github.com)
- Kind: Parameter removal
- Announced: March 24, 2026
- Takes effect: April 21, 2026
- Calls after that day: fail
- Calls it hits: `PATCH /orgs/{id}`, `body parameter dependabot_alerts_enabled_for_new_repositories`
- Source: [Announcement](https://github.blog/changelog/2026-03-24-upcoming-deprecation-of-security-related-organization-api-fields)
- Verified: November 6, 2026, against GitHub REST API's own pages
- Page: https://www.okapi.bot/providers/github-rest-api/breaking-changes/dependabot-alerts-enabled-for-new-repositories-on-patch-orgs-stops-working/

## GitHub REST API's words

> Update any scripts or integrations that read or write these fields, as they’ll no longer be available after April 21, 2026.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent