1
0
mirror of synced 2025-12-21 19:06:49 -05:00
Commit Graph

240 Commits

Author SHA1 Message Date
Rachael Rose Renk
2a38934ce6 Update content/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions.md 2023-02-02 10:25:19 -07:00
Rachael Rose Renk
4b3693aa20 Update content/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions.md 2023-02-02 10:25:12 -07:00
Rotzbua
92db897701 Fix dependabot example auto-label
* Fix missing `GITHUB_TOKEN` to get permission for adding label
2023-01-30 00:17:01 +01:00
Rotzbua
6769bce8d4 Fix dependabot examples
* Fix deprecation warning message
* GH Action should use just main version
2023-01-30 00:03:51 +01:00
Kevin Heis
74e64648e6 Reformat towards deprecation 3.3 (#34181) 2023-01-26 16:13:09 +00:00
mc
61446f056e [Ready for merging - 2023-01-12] - Pausing / unpausing Dependabot updates and related notifications (#33379)
Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: Erin Havens <erinhav@github.com>
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
2023-01-12 17:40:37 +00:00
Joe Clark
471701851f Add documentation for GitHub Actions configuration variables (#33119)
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Tauhid Anjum <tauhidanjum@gmail.com>
Co-authored-by: Lucas Costi <lucascosti@users.noreply.github.com>
2023-01-10 05:17:34 +00:00
Lucas Costi
30adcf1210 Add raw tags to Dependabot Actions code (#33534) 2022-12-14 02:01:43 +00:00
mc
502af8f776 Dependabot does not access public registries when the user has configured private registries - fix broken link (#33515) 2022-12-13 19:55:02 +00:00
Sophie
48524a0a7d [2022-12-13]: Dependabot does not access public registries when the user has configured private registries - [GA] (#33310)
Co-authored-by: Jake Coffman <jakecoffman@github.com>
Co-authored-by: Anne-Marie  <102995847+am-stead@users.noreply.github.com>
Co-authored-by: Nish Sinha <nishnha@github.com>
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Ankit Honey <honeyankit@github.com>
2022-12-13 19:22:06 +00:00
Markus Schulte
3203ecbc31 Warn to wait for checks if using Dependabot auto-merge (#21607) 2022-11-15 12:29:49 +00:00
Rachael Sewell
3e998f61d5 use azure blob storage for archived enterprise versions (#31883)
Co-authored-by: Laura Coursen <lecoursen@github.com>
Co-authored-by: mchammer01 <42146119+mchammer01@users.noreply.github.com>
2022-10-25 12:03:38 -07:00
Joe Clark
74a679dc51 Make product variables for Enterprise translation-friendly (#31628)
Co-authored-by: Laura Coursen <lecoursen@github.com>
Co-authored-by: Evan Bonsignori <ebonsignori@github.com>
2022-10-17 18:54:05 +00:00
Victor Lin
d740a8257e Fix incorrect comment on GitHub Actions example 2022-10-06 13:28:39 -07:00
mc
253e2a4666 Merge branch 'main' into mchammer01/dependabot-yml-weekly 2022-09-30 15:28:43 +01:00
mc
c4f1f8659f Update content/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot.md
Co-authored-by: Sophie <29382425+sophietheking@users.noreply.github.com>
2022-09-30 15:25:02 +01:00
PSJ
8783f5960a Update steps to create repo secrets (#18175)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Lucas Costi <lucascosti@users.noreply.github.com>
2022-09-30 03:51:47 +00:00
mc
27911004ec Update keeping-your-actions-up-to-date-with-dependabot.md 2022-09-29 08:55:43 +01:00
Sarah Schneider
b7f48ea2c1 Support GHAE internal-only semantic versioning (#29178)
Co-authored-by: Peter Bengtsson <mail@peterbe.com>
Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com>
2022-09-22 08:26:58 +02:00
Sophie
0e6fc462ce [2022-09-07]: Dependabot unlocks parent dependencies on updates - [GA] (#28853)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: Brad Isbell <bradify@github.com>
2022-09-08 09:16:32 +10:00
Orhan Toy
4d24a40d08 Fix typo: updatng -> updating (#29726)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-08-09 09:40:43 +00:00
JonZeolla
1434aec1a9 Fix github.actor examples (#19267) 2022-07-28 09:30:19 +00:00
Andy Barnes
441cfc54cf Add pull-requests: write to permissions: block (#29350) 2022-07-27 08:09:51 +00:00
Sarah Edwards
012525e673 Document triggering_actor (#28988) 2022-07-26 22:54:58 +00:00
Jurre
d738183157 Dependabot: explain how to allow rebases over appended commits (#29026)
* Depedabot: explain how to allow rebases over appended commits

By default Dependabot stops rebasing PRs that have been altered, in some cases (especially when setting up automations that add commits to PRs automatically), this is not desirable, and it's preferable for Dependabot to force push over those commits, removing them and having the automation re-generate them.

This is a feature that's been present in Dependabot for a while already, but has not been documented, so let's document it.

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

Co-authored-by: Jurre <jurre@github.com>

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-07-14 14:04:12 +00:00
Felicity Chapman
ea601b7e31 Tidy up some outdated links and language: "vulnerable dependencies" (#28474) 2022-06-17 11:59:36 +00:00
Felicity Chapman
06e0979e34 [2022-06-15]: Advisory Database Supports Malware Advisories (beta) (#28367) 2022-06-17 12:51:16 +01:00
Felicity Chapman
6c030fb067 Draft new content 2022-05-31 13:55:38 +01:00
Felicity Chapman
f293456e62 Remove reusable to prepare for updates 2022-05-31 13:32:28 +01:00
Andy Barnes
54091f1ebf close quotes around linked article (#28045)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-05-27 12:21:37 +00:00
Andy Barnes
7f42c91b78 work for issue 6293 (#27707)
* make the configuration options table reusable
2022-05-27 10:47:05 +01:00
Matt Pollard
52f7aaf271 GitHub AE May 2022 update (#27179) 2022-05-17 16:59:26 +02:00
mc
0d8b875032 Update content/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions.md 2022-05-13 14:36:25 +01:00
mc
604608f219 Update content/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions.md 2022-05-13 14:27:44 +01:00
Kevin Burnett
1430a8eb5b clarify that there are two different approaches
one uses github actions and the other does not.
2022-05-11 14:00:46 -07:00
mc
1973fc02ee Apply suggestions from code review 2022-04-28 07:21:00 +01:00
Felipe Santos
2f53257d9e Remove unneeded permission in auto-merge example
And simplify the workflow a little.
2022-04-25 23:24:24 -03:00
Lucas Costi
b49c768777 Version actions for GHES, use reusables (#26004)
Co-authored-by: Kevin Heis <heiskr@users.noreply.github.com>
Co-authored-by: Sarah Edwards <skedwards88@github.com>
2022-04-01 09:36:17 +10:00
Josh Soref
7c0cc48111 Remove stray trailing " 2022-03-29 22:48:19 -04:00
mc
7b405ec6b1 Supply chain restructuring (#26105)
* reorganize supply chain docs
2022-03-17 17:31:04 +00:00