Skip to content

fix: Clarifying sources that support Terraform Dependency Updates #30139

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 23 commits into from
Dec 1, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
cf18297
fix: updating introduction and links
CBID2 Nov 21, 2023
ec6e5c6
fix: revise formatting issues in line 34
CBID2 Nov 22, 2023
5681c75
Merge branch 'main' into clarifying-sources
CBID2 Nov 22, 2023
7a7c866
Merge branch 'main' into clarifying-sources
CBID2 Nov 23, 2023
685c7d2
fix: turn the sentence into active tense
CBID2 Nov 24, 2023
e2932e6
fix: fix broken link
CBID2 Nov 24, 2023
949fded
Merge branch 'main' into clarifying-sources
CBID2 Nov 24, 2023
028f1da
Merge branch 'main' into clarifying-sources
CBID2 Nov 29, 2023
95497ba
feat: add a sentence about registries
CBID2 Nov 29, 2023
69d3b10
fix: revise sentence
CBID2 Nov 29, 2023
c48f0d0
feat: add a statement on granting Dependabot access
CBID2 Nov 29, 2023
1397825
Merge branch 'main' into clarifying-sources
CBID2 Nov 30, 2023
66971ba
fix: break up content
CBID2 Nov 30, 2023
f66b28c
fix: revise sentence
CBID2 Nov 30, 2023
37cd4e3
fix: revise formatting
CBID2 Nov 30, 2023
3f13bea
fix: sentence goes to a different line
CBID2 Nov 30, 2023
10f14f3
Merge branch 'main' into clarifying-sources
CBID2 Nov 30, 2023
3efdf00
Update content/code-security/dependabot/dependabot-version-updates/ab…
am-stead Dec 1, 2023
56564aa
Update content/code-security/dependabot/dependabot-version-updates/ab…
am-stead Dec 1, 2023
768a587
Update content/code-security/dependabot/dependabot-version-updates/co…
am-stead Dec 1, 2023
be81472
Update content/code-security/dependabot/dependabot-version-updates/co…
am-stead Dec 1, 2023
d56d35e
Merge branch 'main' into clarifying-sources
am-stead Dec 1, 2023
5b66ff5
Update content/code-security/dependabot/dependabot-version-updates/ab…
am-stead Dec 1, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -56,8 +56,8 @@ If you've enabled security updates, you'll sometimes see extra pull requests for
## Supported repositories and ecosystems
<!-- If you make changes to this feature, check whether any of the changes affect languages listed in /get-started/learning-about-github/github-language-support. If so, please update the language support article accordingly. -->

You can configure version updates for repositories that contain a dependency manifest or lock file for one of the supported package managers. For some package managers, you can also configure vendoring for dependencies. For more information, see "[AUTOTITLE](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#vendor)."

You can configure version updates for repositories that contain a dependency manifest or lock file for one of the supported package managers. For some package managers, you can also configure vendoring for dependencies. For more information, see [`vendor`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#vendor).
{% data variables.product.prodname_dependabot %} also supports dependencies in private registries. For more information, see [`registries`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#registries).
{% ifversion ghes %}

{% note %}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,11 @@ In general, security updates use any configuration options that affect pull requ

### `package-ecosystem`

**Required**. You add one `package-ecosystem` element for each package manager that you want {% data variables.product.prodname_dependabot %} to monitor for new versions. The repository must also contain a dependency manifest or lock file for each of these package managers. If you want to enable vendoring for a package manager that supports it, the vendored dependencies must be located in the required directory. For more information, see [`vendor`](#vendor) below.{% ifversion ghes %}
**Required**. You add one `package-ecosystem` element for each package manager that you want {% data variables.product.prodname_dependabot %} to monitor for new versions. The repository must also contain a dependency manifest or lock file for each of these package managers.

If you want to enable vendoring for a package manager that supports it, the vendored dependencies must be located in the required directory. For more information, see [`vendor`](#vendor) below.

If you want to allow {% data variables.product.prodname_dependabot %} to access a private package registry when performing a version update, you can include a `registries` setting in the configuration file. For more information, see [`registries`](#registries) below.{% ifversion ghes %}

{% note %}

Expand Down Expand Up @@ -871,6 +875,8 @@ updates:
## Configuration options for private registries

The top-level `registries` key is optional. It allows you to specify authentication details that {% data variables.product.prodname_dependabot %} can use to access private package registries.

You can give {% data variables.product.prodname_dependabot %} access to private package registries hosted by GitLab or Bitbucket by specifying a `type` of `git`. For more information, see [`git`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#git).
{% ifversion ghes > 3.7 %}
{% note %}

Expand Down