From 0c77f19f6b51c0e1b83b4838389912c9af0aa3dc Mon Sep 17 00:00:00 2001 From: Fuad Olatunji <65264054+fuadop@users.noreply.github.com> Date: Sat, 28 May 2022 18:07:53 +0100 Subject: [PATCH 1/4] proposal: add custom commit message example (s) This is related to https://github.com/dependabot/dependabot-core/issues/5192 . cc: @jeffwidman --- .../configuration-options-for-the-dependabot.yml-file.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md index 1c26730eab..37ffb9da34 100644 --- a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md +++ b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md @@ -280,6 +280,8 @@ updates: prefix-development: "pip dev" include: "scope" ``` +An example commit message based on your recent commit preferences would be ` (dev-deps): bump requests from 1.0.8 to 1.1.3`. + ### `ignore` {% data reusables.dependabot.default-dependencies-allow-ignore %} From 2766510fd34e1701286890e1504405e11a44b8df Mon Sep 17 00:00:00 2001 From: Fuad Olatunji <65264054+fuadop@users.noreply.github.com> Date: Mon, 30 May 2022 09:54:59 +0100 Subject: [PATCH 2/4] Update content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md Co-authored-by: Jeff Widman --- .../configuration-options-for-the-dependabot.yml-file.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md index 37ffb9da34..fd8e4b8432 100644 --- a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md +++ b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md @@ -280,7 +280,11 @@ updates: prefix-development: "pip dev" include: "scope" ``` -An example commit message based on your recent commit preferences would be ` (dev-deps): bump requests from 1.0.8 to 1.1.3`. +Example: +Using these preferences, bumping the `requests` library in the `pip` Development dependency group generates a commit message of: + + pip dev: bump requests from 1.0.0 to 1.0.1 + ### `ignore` From 77f21c80d83718a958cb7fe1e238401b997bf345 Mon Sep 17 00:00:00 2001 From: mc <42146119+mchammer01@users.noreply.github.com> Date: Fri, 10 Jun 2022 13:54:31 +0100 Subject: [PATCH 3/4] Apply suggestions from code review --- .../configuration-options-for-the-dependabot.yml-file.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md index fd8e4b8432..9b438c515e 100644 --- a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md +++ b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md @@ -280,12 +280,10 @@ updates: prefix-development: "pip dev" include: "scope" ``` -Example: -Using these preferences, bumping the `requests` library in the `pip` Development dependency group generates a commit message of: +If you use the same configuration as in the example above, bumping the `requests` library in the `pip` development dependency group will generate a commit message of: - pip dev: bump requests from 1.0.0 to 1.0.1 + 'pip dev: bump requests from 1.0.0 to 1.0.1' - ### `ignore` {% data reusables.dependabot.default-dependencies-allow-ignore %} From c4a1c607eb085d63150f1a3dc5d92ba427d8fdc9 Mon Sep 17 00:00:00 2001 From: mc <42146119+mchammer01@users.noreply.github.com> Date: Fri, 10 Jun 2022 14:03:22 +0100 Subject: [PATCH 4/4] Update content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md --- .../configuration-options-for-the-dependabot.yml-file.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md index 9b438c515e..898fbbdeb3 100644 --- a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md +++ b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md @@ -282,7 +282,7 @@ updates: ``` If you use the same configuration as in the example above, bumping the `requests` library in the `pip` development dependency group will generate a commit message of: - 'pip dev: bump requests from 1.0.0 to 1.0.1' + `pip dev: bump requests from 1.0.0 to 1.0.1` ### `ignore`