1
0
mirror of synced 2025-12-30 12:02:01 -05:00

Apply suggestions from code review

Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
This commit is contained in:
mc
2021-01-28 11:11:55 +00:00
committed by GitHub
parent 336a573c06
commit 6ecd6ce3c2

View File

@@ -1,11 +1,11 @@
The following table shows, for each package manager:
- The YAML value to use in the *dependabot.yml* file
- The supported versions
- The supported versions of the package manager
- Whether dependencies in private {% data variables.product.prodname_dotcom %} repositories are supported
- Whether vendoring is supported for the package
- Whether vendored dependencies are supported
Package manager | YAML value | Supported versions | Private {% data variables.product.prodname_dotcom %} repositories | Vendoring
--- | :---:| :---:|:---:|:---:
Package manager | YAML value | Supported versions | Private repositories | Vendoring
--- | --- | --- |:---:|:---:
Bundler | `bundler` | v1 | | **✓** |
Cargo | `cargo` | v1 | **✓** | |
Composer | `composer` | v1,v2 | **✓** | |
@@ -19,13 +19,13 @@ Hex | `hex` | TBD | | |
Maven | `maven` | see (B) below | **✓** | |
Mix | `mix` | v1 | **✓** | |
npm | `npm` | v6 | **✓** | |
NuGet | `nuget` | <= 4.8.</br>See (C) below | **✓** | |
NuGet | `nuget` | <= 4.8.</br>see (C) below | **✓** | |
pip | `pip` | v20 | | |
pipenv | `pip` | <= 2018.11.26 | | |
pip-compile | `pip` | 5.5.0 | | |
poetry | `pip` | TBD | | |
Terraform | `terraform` | <= 0.11 | **✓** | |
yarn | `nmp` | v1 | | |
yarn | `npm` | v1 | | |
(A) {% data variables.product.prodname_dependabot %} doesn't run Gradle but supports updates to the following files: `build.gradle` and `build.gradle.kts` (for Kotlin projects).