jprdonnelly/docs
1
0
Fork 0
mirror of synced 2025-12-19 09:57:42 -05:00
Code Issues Projects Releases Wiki Activity

Add Dependabot ecosystem support for vcpkg (#56946)

Browse Source 
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
This commit is contained in:
Jamie Magee
2025-08-12 09:02:42 -07:00
committed by GitHub
parent b107a850ff
commit b59f2a72bb
3 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md
View File

@@ -506,6 +506,9 @@ Package manager | YAML value | Supported versions |
| Swift | `swift` | v5 |
| Terraform | `terraform` | >= 0.13, <= 1.10.x |
| uv | `uv` | v0 |
| {% ifversion dependabot-vcpkg-support %} |
| vcpkg | `vcpkg` | Not applicable |
| {% endif %} |
| yarn | `npm` | v1, v2, v3, v4 |
## `pull-request-branch-name.separator` {% octicon "versions" aria-label="Version updates" height="24" %} {% octicon "shield-check" aria-label="Security updates" height="24" %}

6
data/features/dependabot-vcpkg-support.yml Normal file
View File

@@ -0,0 +1,6 @@
# Reference: #19113
# vcpkg support for Dependabot
versions:
fpt: '*'
ghec: '*'
ghes: '>= 3.20'

11
data/reusables/dependabot/supported-package-managers.md
View File

@@ -35,6 +35,9 @@ poetry | `pip` | v1 | {% octicon "check" aria-l
[Swift](#swift) | `swift` | v5 | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} (git only) | {% octicon "x" aria-label="Not supported" %} |
[Terraform](#terraform) | `terraform` | >= 0.13, <= 1.10.x | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable |
uv | `uv` | v0 | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable |
| {% ifversion dependabot-vcpkg-support %} |
[vcpkg](#vcpkg) | `vcpkg` | Not applicable | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | Not applicable |
| {% endif %} |
[yarn](#yarn) | `npm` | v1, v2, v3 | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %}|
> [!TIP]
@@ -161,6 +164,14 @@ Terraform support includes:
* Terraform providers.
* Private Terraform Registry. You can configure access for private git repositories by specifying a git registry in your `dependabot.yml` file. For more information, see [`git`](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#git).
{% ifversion dependabot-vcpkg-support %}
#### vcpkg
vcpkg support includes updating the `builtin-baseline` commit SHA from the vcpkg ports repository in your `vcpkg.json` manifest file. For more information visit the [`microsoft/vcpkg` repository](https://github.com/microsoft/vcpkg) on {% data variables.product.prodname_dotcom_the_website %} and see [What is manifest mode?](https://learn.microsoft.com/vcpkg/concepts/manifest-mode) in the Microsoft documentation.
{% endif %}
#### yarn
Dependabot supports vendored dependencies for v2 onwards.