jprdonnelly/docs
1
0
Fork 0
mirror of synced 2025-12-30 03:01:36 -05:00
Code Issues Projects Releases Wiki Activity

Merge pull request #22713 from github/repo-sync

Browse Source 
repo sync
This commit is contained in:
Octomerger Bot
2022-12-15 11:39:19 -05:00
committed by GitHub
parent 40b44955c8 14bf19e6c7
commit ba9dcc1239
1 changed files with 16 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
data/reusables/dependabot/supported-package-managers.md
View File

@@ -13,19 +13,19 @@ Docker {% ifversion dependabot-version-updates-enhanced-docker-support %}<sup>[1
Hex | `mix` | v1 | | **✓** | |
elm-package | `elm` | v0.19 | **✓** | **✓** | |
git submodule | `gitsubmodule` | N/A (no version) | **✓** | **✓** | |
GitHub Actions | `github-actions` | N/A (no version) | **✓** | **✓** | |
{% data variables.product.prodname_actions %} <sup>[2]</sup> | `github-actions` | N/A (no version) | **✓** | **✓** | |
Go modules | `gomod` | v1 | **✓** | **✓** | **✓** |
Gradle | `gradle` | N/A (no version)<sup>[2]</sup> | **✓** | **✓** | |
Maven | `maven` | N/A (no version)<sup>[3]</sup> | **✓** | **✓** | |
Gradle <sup>[3]</sup> | `gradle` | N/A (no version) | **✓** | **✓** | |
Maven <sup>[4]</sup> | `maven` | N/A (no version) | **✓** | **✓** | |
npm | `npm` | v6, v7, v8 | **✓** | **✓** | |
NuGet | `nuget` | <= 4.8<sup>[4]</sup> | **✓** | **✓** | |
pip{% ifversion dependabot-PEP621-support %}<sup>[5]</sup>{% endif %} | `pip` | v21.1.2 | | **✓** | |
NuGet | `nuget` | <= 4.8<sup>[5]</sup> | **✓** | **✓** | |
pip{% ifversion dependabot-PEP621-support %}<sup>[6]</sup>{% endif %} | `pip` | v21.1.2 | | **✓** | |
pipenv | `pip` | <= 2021-05-29 | | **✓** | |
pip-compile{% ifversion dependabot-PEP621-support %}<sup>[5]</sup>{% endif %} | `pip` | 6.1.0 | | **✓** | |
pip-compile{% ifversion dependabot-PEP621-support %}<sup>[6]</sup>{% endif %} | `pip` | 6.1.0 | | **✓** | |
poetry | `pip` | v1 | | **✓** | |{% ifversion fpt or ghec or ghes > 3.4 %}
pub | `pub` | v2 <sup>[6]</sup> | | | |{% endif %}
pub <sup>[7]</sup> | `pub` | v2 | | | |{% endif %}
Terraform | `terraform` | >= 0.13, <= 1.2.x | **✓** | **✓** | |
{% ifversion dependabot-yarn-v3-update %}yarn | `npm` | v1, v2, v3 | **✓** | **✓** | **✓**<sup>[7]</sup> |{% else %}yarn | `npm` | v1 | **✓** | **✓** | |
{% ifversion dependabot-yarn-v3-update %}yarn | `npm` | v1, v2, v3 | **✓** | **✓** | **✓**<sup>[8]</sup> |{% else %}yarn | `npm` | v1 | **✓** | **✓** | |
{% endif %}
{% tip %}
@@ -40,17 +40,19 @@ Terraform | `terraform` | >= 0.13, <= 1.2.x | **✓** | **✓** | |
{% data variables.product.prodname_dependabot %} supports both public and private Docker registries. For a list of the supported registries, see "`docker-registry`" in "[Configuration options for the dependabot.yml file](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#docker-registry)."
{% endif %}
[2] {% data variables.product.prodname_dependabot %} doesn't run Gradle but supports updates to the following files: `build.gradle`, `build.gradle.kts` (for Kotlin projects), and files included via the `apply` declaration that have `dependencies` in the filename. Note that `apply` does not support `apply to`, recursion, or advanced syntaxes (for example, Kotlin's `apply` with `mapOf`, filenames defined by property).
[2] {% data variables.product.prodname_dependabot %} only supports updates to {% data variables.product.prodname_actions %} using the {% data variables.product.prodname_dotcom %} repository syntax, such as {% data reusables.actions.action-checkout %}. Docker Hub and {% data variables.product.prodname_registry %} {% data variables.product.prodname_container_registry %} URLs are currently not supported.
[3] {% data variables.product.prodname_dependabot %} doesn't run Maven but supports updates to `pom.xml` files.
[3] {% data variables.product.prodname_dependabot %} doesn't run Gradle but supports updates to the following files: `build.gradle`, `build.gradle.kts` (for Kotlin projects), and files included via the `apply` declaration that have `dependencies` in the filename. Note that `apply` does not support `apply to`, recursion, or advanced syntaxes (for example, Kotlin's `apply` with `mapOf`, filenames defined by property).
[4] {% data variables.product.prodname_dependabot %} doesn't run the NuGet CLI but does support most features up until version 4.8.
[4] {% data variables.product.prodname_dependabot %} doesn't run Maven but supports updates to `pom.xml` files.
[5] {% data variables.product.prodname_dependabot %} doesn't run the NuGet CLI but does support most features up until version 4.8.
{% ifversion dependabot-PEP621-support %}
[5] In addition to supporting updates to `requirements.txt` files, {% data variables.product.prodname_dependabot %} supports updates to `pyproject.toml` files if they follow the PEP 621 standard. {% endif %}
[6] In addition to supporting updates to `requirements.txt` files, {% data variables.product.prodname_dependabot %} supports updates to `pyproject.toml` files if they follow the PEP 621 standard. {% endif %}
{% ifversion fpt or ghec or ghes > 3.4 %}
[6] {% ifversion ghes = 3.5 %}`pub` support is currently in beta. Any known limitations are subject to change. Note that {% data variables.product.prodname_dependabot %}:
[7] {% ifversion ghes = 3.5 %}`pub` support is currently in beta. Any known limitations are subject to change. Note that {% data variables.product.prodname_dependabot %}:
- Doesn't support updating git dependencies for `pub`.
- Won't perform an update when the version that it tries to update to is ignored, even if an earlier version is available.
@@ -59,5 +61,5 @@ Terraform | `terraform` | >= 0.13, <= 1.2.x | **✓** | **✓** | |
{% endif %}
{% ifversion dependabot-yarn-v3-update %}
[7] Dependabot supports vendored dependencies for v2 onwards.{% endif %}
[8] Dependabot supports vendored dependencies for v2 onwards.{% endif %}