# dependabot_security_updates_enabled_for_new_repositories on PATCH /orgs/{} stops working

Calls to PATCH /orgs/{id}, body parameter dependabot_security_updates_enabled_for_new_repositories on GitHub REST API stopped working on April 21, 2026.

On April 21, 2026, the body parameter dependabot_security_updates_enabled_for_new_repositories was removed from PATCH /orgs/{id}. Requests using this parameter fail since that date. The change affects any scripts or integrations that write this field.

## What to use instead

Use code security configurations (/orgs/{org}/code-security/configurations) and set a default configuration for new repositories.

- API: GitHub REST API (api.github.com)
- Kind: Parameter removal
- Announced: March 24, 2026
- Takes effect: April 21, 2026
- Calls after that day: fail
- Calls it hits: `PATCH /orgs/{id}`, `body parameter dependabot_security_updates_enabled_for_new_repositories`
- Source: [Announcement](https://github.blog/changelog/2026-03-24-upcoming-deprecation-of-security-related-organization-api-fields)
- Verified: November 6, 2026, against GitHub REST API's own pages
- Page: https://www.okapi.bot/providers/github-rest-api/breaking-changes/dependabot-security-updates-enabled-for-new-repositories-on-patch-orgs-stops/

## GitHub REST API's words

> Update any scripts or integrations that read or write these fields, as they’ll no longer be available after April 21, 2026.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent