Skip to content

Commit 4959e2e

Browse files
authored
Dependabot Version Updates GA (#18477)
1 parent e7bfa0d commit 4959e2e

11 files changed

Lines changed: 0 additions & 28 deletions

content/code-security/supply-chain-security/about-dependabot-version-updates.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,8 +13,6 @@ topics:
1313
- repositories
1414
---
1515

16-
{% data reusables.dependabot.beta-note %}
17-
1816
### About {% data variables.product.prodname_dependabot_version_updates %}
1917

2018
{% data variables.product.prodname_dependabot %} takes the effort out of maintaining your dependencies. You can use it to ensure that your repository automatically keeps up with the latest releases of the packages and applications it depends on.

content/code-security/supply-chain-security/configuration-options-for-dependency-updates.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,6 @@ topics:
1111
- repositories
1212
---
1313

14-
{% data reusables.dependabot.beta-note %}
15-
1614
### About the *dependabot.yml* file
1715

1816
The {% data variables.product.prodname_dependabot %} configuration file, *dependabot.yml*, uses YAML syntax. If you're new to YAML and want to learn more, see "[Learn YAML in five minutes](https://www.codeproject.com/Articles/1214409/Learn-YAML-in-five-minutes)."

content/code-security/supply-chain-security/customizing-dependency-updates.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,6 @@ topics:
1010
- repositories
1111
---
1212

13-
{% data reusables.dependabot.beta-note %}
14-
1513
### About customizing dependency updates
1614

1715
After you've enabled version updates, you can customize how {% data variables.product.prodname_dependabot %} maintains your dependencies by adding further options to the *dependabot.yml* file. For example, you could:

content/code-security/supply-chain-security/enabling-and-disabling-version-updates.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,6 @@ topics:
1111
---
1212
<!--Marketing-LINK: From /features/security/software-supply-chain page "About version updates for dependencies".-->
1313

14-
{% data reusables.dependabot.beta-note-no-link %}
15-
1614
### About version updates for dependencies
1715

1816
You enable {% data variables.product.prodname_dependabot_version_updates %} by checking a *dependabot.yml* configuration file in to your repository's `.github` directory. {% data variables.product.prodname_dependabot %} then raises pull requests to keep the dependencies you configure up-to-date. For each package manager's dependencies that you want to update, you must specify the location of the package manifest files and how often to check for updates to the dependencies listed in those files. For information about enabling security updates, see "[Configuring {% data variables.product.prodname_dependabot_security_updates %}](/github/managing-security-vulnerabilities/configuring-dependabot-security-updates)."

content/code-security/supply-chain-security/keeping-your-actions-up-to-date-with-dependabot.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,6 @@ topics:
1010
- repositories
1111
---
1212

13-
{% data reusables.dependabot.beta-note %}
14-
1513
### About {% data variables.product.prodname_dependabot_version_updates %} for actions
1614

1715
Actions are often updated with bug fixes and new features to make automated processes more reliable, faster, and safer. When you enable {% data variables.product.prodname_dependabot_version_updates %} for {% data variables.product.prodname_actions %}, {% data variables.product.prodname_dependabot %} will help ensure that references to actions in a repository's *workflow.yml* file are kept up to date. For each action in the file, {% data variables.product.prodname_dependabot %} checks the action's reference (typically a version number or commit identifier associated with the action) against the latest version. If a more recent version of the action is available, {% data variables.product.prodname_dependabot %} will send you a pull request that updates the reference in the workflow file to the latest version. For more information about {% data variables.product.prodname_dependabot_version_updates %}, see "[About {% data variables.product.prodname_dependabot_version_updates %}](/github/administering-a-repository/about-dependabot-version-updates)." For more information about configuring workflows for {% data variables.product.prodname_actions %}, see "[Learn {% data variables.product.prodname_actions %}](/actions/learn-github-actions)."

content/code-security/supply-chain-security/listing-dependencies-configured-for-version-updates.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,6 @@ topics:
99
- repositories
1010
---
1111

12-
{% data reusables.dependabot.beta-note %}
13-
1412
### Viewing dependencies monitored by {% data variables.product.prodname_dependabot %}
1513

1614
After you've enabled version updates, you can confirm that your configuration is correct using the **{% data variables.product.prodname_dependabot %}** tab in the dependency graph for the repository. For more information, see "[Enabling and disabling version updates](/github/administering-a-repository/enabling-and-disabling-version-updates)."

content/code-security/supply-chain-security/managing-pull-requests-for-dependency-updates.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,6 @@ topics:
99
- repositories
1010
---
1111

12-
{% data reusables.dependabot.beta-note %}
13-
1412
### About {% data variables.product.prodname_dependabot %} pull requests
1513

1614
{% data reusables.dependabot.pull-request-introduction %}

content/code-security/supply-chain-security/troubleshooting-dependabot-errors.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,6 @@ topics:
1111
- security
1212
---
1313

14-
{% data reusables.dependabot.beta-note %}
15-
1614
### About {% data variables.product.prodname_dependabot %} errors
1715

1816
{% data reusables.dependabot.pull-request-introduction %}

content/github/setting-up-and-managing-organizations-and-teams/managing-security-and-analysis-settings-for-your-organization.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -99,8 +99,6 @@ You can enable or disable features for all repositories. {% if currentVersion ==
9999

100100
### Allowing {% data variables.product.prodname_dependabot %} to access private dependencies
101101

102-
{% data reusables.dependabot.beta-note %}
103-
104102
{% data variables.product.prodname_dependabot %} can check for outdated dependency references in a project and automatically generate a pull request to update them. To do this, {% data variables.product.prodname_dependabot %} must have access to all of the targeted dependency files. Typically, version updates will fail if one or more dependencies are inaccessible. For more information, see "[About {% data variables.product.prodname_dependabot %} version updates](/github/administering-a-repository/about-dependabot-version-updates)."
105103

106104
By default, {% data variables.product.prodname_dependabot %} can't update dependencies that are located in private repositories or private package registries. However, if a dependency is in a private {% data variables.product.prodname_dotcom %} repository within the same organization as the project that uses that dependency, you can allow {% data variables.product.prodname_dependabot %} to update the version successfully by giving it access to the host repository.

data/reusables/dependabot/beta-note-no-link.md

Lines changed: 0 additions & 5 deletions
This file was deleted.

0 commit comments

Comments
 (0)