You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: data/reusables/dependabot/supported-package-managers.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,8 +1,8 @@
1
1
The following table shows, for each package manager:
2
-
-the YAML value to use in the file,
3
-
-the supported versions,
4
-
-whether dependencies in private {% data variables.product.prodname_dotcom %} repositories are supported
5
-
-whether vendoring is supported for the dependency
2
+
-The YAML value to use in the*dependabot.yml* file
3
+
-The supported versions
4
+
-Whether dependencies in private {% data variables.product.prodname_dotcom %} repositories are supported
5
+
-Whether vendoring is supported for the package
6
6
7
7
Package manager | YAML value | Supported versions | Private {% data variables.product.prodname_dotcom %} repositories | Vendoring
8
8
--- | :---:| :---:|:---:|:---:
@@ -27,10 +27,10 @@ poetry | `pip` | TBD | | |
27
27
Terraform | `terraform` | <= 0.11 | **✓** | |
28
28
yarn | `nmp` | v1 | | |
29
29
30
-
For example, if you use `poetry` to manage your Python dependencies and want {% data variables.product.prodname_dependabot %} to monitor your dependency manifest file for new versions, use `package-ecosystem: "pip"` in your *dependabot.yml* file.
30
+
(A) {% data variables.product.prodname_dependabot %} doesn't run Gradle but supports updates to the following files: `build.gradle` and `build.gradle.kts` (for Kotlin projects).
31
31
32
-
(A) {% data variables.product.prodname_dependabot %} doesn't run Gradle (therefore doesn't really support a version of Gradle), but {% data variables.product.prodname_dependabot %} supports updates to the following files: `build.gradle` and `build.gradle.kts` (Kotlin projects).
32
+
(B) {% data variables.product.prodname_dependabot %} doesn't run Maven but supports updates to `pom.xml` files.
33
33
34
-
(B) {% data variables.product.prodname_dependabot %} doesn't run Maven (therefore doesn't really support a version of Maven), but {% data variables.product.prodname_dependabot %} supports updates to `pom.xml` files.
34
+
(C) {% data variables.product.prodname_dependabot %} doesn't run the NuGet CLI but does support most features up until version 4.8. Version 4.9 introduces lockfiles, which are unsupported.
35
35
36
-
(C) {% data variables.product.prodname_dependabot %} doesn't run the NuGet cli (therefore doesn't really support a version of NuGet) but does support most features up until 4.8, as 4.9 introduces lockfiles which are unsupported.
36
+
For package managers such as `pipenv` and `poetry`, you need to use the pip YAML value.For example, if you use `poetry` to manage your Python dependencies and want {% data variables.product.prodname_dependabot %} to monitor your dependency manifest file for new versions, use `package-ecosystem: "pip"` in your *dependabot.yml* file.
0 commit comments