# GET /repos/{}/{}/dependency-graph/sbom stops working

Calls to GET /repos/{id}/{id}/dependency-graph/sbom on GitHub REST API stop working on November 13, 2026.

On November 13, 2026, the older synchronous dependency graph endpoint will stop working. This change affects calls to GET /repos/{id}/{id}/dependency-graph/sbom, which will fail after that date. The endpoint is deprecated and slated for removal.

## What to use instead

Use /repos/{owner}/{repo}/dependency-graph/sbom/generate-report and poll the returned URL instead.

- API: GitHub REST API (api.github.com)
- Kind: Endpoint removal
- Announced: May 12, 2026
- Takes effect: November 13, 2026
- Calls after that day: fail
- Calls it hits: `GET /repos/{id}/{id}/dependency-graph/sbom`
- Source: [Announcement](https://github.blog/changelog/2026-05-12-synchronous-sbom-api-deprecated/)
- Verified: November 6, 2026, against GitHub REST API's own pages
- Page: https://www.okapi.bot/providers/github-rest-api/breaking-changes/get-repos-dependency-graph-sbom-stops-working/

## GitHub REST API's words

> the older, synchronous API is deprecated and slated for removal in six months, on November 13, 2026.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent