---
title: "Review a dismissal request for a Dependabot alert for a repository"
method: PATCH
path: "/repos/{owner}/{repo}/dismissal-requests/dependabot/{alert_number}"
tags: ["dependabot"]
---

# Review a dismissal request for a Dependabot alert for a repository

`PATCH /repos/{owner}/{repo}/dismissal-requests/dependabot/{alert_number}`

Approve or deny a dismissal request to dismiss a Dependabot alert in a repository.

Delegated alert dismissal must be enabled on the repository and the user must be a dismissal reviewer to access this endpoint.
OAuth app tokens and personal access tokens (classic) need the `security_events` scope to use this endpoint.

## Path parameters

- `owner` string, required
- `repo` string, required
- `alert_number` integer, required

## Request body

- object
  - `status` 'approve' | 'deny', required — The review action to perform on the dismissal request.
  - `message` string, required — A message to include with the review.

## Response `200`

The review of the dismissal request.

- object
  - `dismissal_review_id` integer — ID of the dismissal review.

## Other responses

- `403` — Forbidden
- `404` — Resource not found
- `422` — Validation failed, or the endpoint has been spammed.
- `500` — Internal Error

## Changes

- **2026-08-20** (2026-03-10) `905703de9c0f` — 1 warning
  - the `message` request property's maxLength was set to `2048`

[Change history](https://skmtc.dev/github/apis/enterprise-cloud/changes/repos/:owner/:repo/dismissal-requests/dependabot/:alert_number/patch.md)

---

[API](https://skmtc.dev/github/apis/enterprise-cloud.md) · [All operations](https://skmtc.dev/github/apis/enterprise-cloud/llms.txt) · [OpenAPI document](https://skmtc.dev/github/apis/enterprise-cloud/revisions/f2fe1bb39903?raw)