jprdonnelly/docs
1
0
Fork 0
mirror of synced 2025-12-22 11:26:57 -05:00
Code Issues Projects Releases Wiki Activity

Dependabot Version Updates GA (#18477)

Browse Source
This commit is contained in:
Mike McDonald
2021-03-31 08:59:30 -06:00
committed by GitHub
parent e7bfa0d293
commit 4959e2e19c
11 changed files with 0 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
content/github/setting-up-and-managing-organizations-and-teams/managing-security-and-analysis-settings-for-your-organization.md
View File

@@ -99,8 +99,6 @@ You can enable or disable features for all repositories. {% if currentVersion ==
### Allowing {% data variables.product.prodname_dependabot %} to access private dependencies
{% data reusables.dependabot.beta-note %}
{% data variables.product.prodname_dependabot %} can check for outdated dependency references in a project and automatically generate a pull request to update them. To do this, {% data variables.product.prodname_dependabot %} must have access to all of the targeted dependency files. Typically, version updates will fail if one or more dependencies are inaccessible. For more information, see "[About {% data variables.product.prodname_dependabot %} version updates](/github/administering-a-repository/about-dependabot-version-updates)."
By default, {% data variables.product.prodname_dependabot %} can't update dependencies that are located in private repositories or private package registries. However, if a dependency is in a private {% data variables.product.prodname_dotcom %} repository within the same organization as the project that uses that dependency, you can allow {% data variables.product.prodname_dependabot %} to update the version successfully by giving it access to the host repository.