1
0
mirror of synced 2026-01-06 15:01:04 -05:00
Commit Graph

231 Commits

Author SHA1 Message Date
Vanessa
11a8821cd9 Dependabot on Self Hosted Runners for GHEC and FPT - [GA] (#50362)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Joe Clark <31087804+jc-clark@users.noreply.github.com>
2024-05-02 17:00:35 +00:00
Peter Bengtsson
4af696a22d Remove dependency-submission-api use from reusables (#49936)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-04-25 12:58:14 +00:00
Jurre
9566d475c2 Update supported-package-managers.md (#50296)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-04-25 07:36:52 +00:00
mc
3880c05abd Revert "Revert "Dependabot on Actions (opt-in) - [GA]"" (#50273) 2024-04-23 15:56:51 +00:00
mc
c8f95faca9 Revert "Dependabot on Actions (opt-in) - [GA] (#49794)"
This reverts commit 34c09590c0.
2024-04-23 15:44:18 +01:00
Vanessa
34c09590c0 Dependabot on Actions (opt-in) - [GA] (#49794)
Co-authored-by: Siara <108543037+SiaraMist@users.noreply.github.com>
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
2024-04-22 21:11:28 +00:00
mc
a5973b0ba5 Include information about dependabot commit signing (#50138) 2024-04-15 14:53:41 +00:00
mc
2d938718e9 Fix the dependabot-updates-registries reusable (#50117)
Co-authored-by: Caro Galvin <carogalvin@github.com>
2024-04-15 06:40:22 +00:00
mc
70f5cad91b Improve links to private registries info/examples in the Dependabot updates docs (#50100)
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
2024-04-12 09:55:58 +00:00
Nish Sinha
fe06dbfa28 Dependabot: Add Terraform 1.7.x to supported package managers (#50070)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-04-10 17:12:05 +00:00
Sam Browning
eca583d96d [MEGABRANCH] Add content for GHAS security configurations public beta (#49364)
Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com>
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
Co-authored-by: Dorothy Mitchell <19343236+dorothymitchell@users.noreply.github.com>
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-04-02 16:10:28 +00:00
Rachael Sewell
a123b01ae1 Remove GHES 3.8 data and markup (#49930)
Co-authored-by: Laura Coursen <lecoursen@github.com>
2024-04-01 16:52:59 +00:00
Peter Bengtsson
01ca8b0c05 Remove actions-configuration-variables because it's always true (#49915) 2024-03-28 22:59:06 +00:00
oluatosn-dev
dc928d7e9a Update managing-security-and-analysis-settings-for-your-organization.md (#49678)
Co-authored-by: Vanessa <vgrl@github.com>
2024-03-18 01:39:39 +00:00
Anne-Marie
8d1eb7d0e1 Skip scheduled Dependabot runs after 15 failures - [GA] #13851 (#49555)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Siara <108543037+SiaraMist@users.noreply.github.com>
2024-03-15 21:27:17 +00:00
Vanessa
6372f6a6bd Dependabot Grouped Security Updates: Configure Groups - [Public Beta] (#49360)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Caro Galvin <carogalvin@github.com>
2024-03-06 21:37:58 +00:00
Peter Bengtsson
0d1e8b7a5b Remove all ifversion that has all versions (7) (#49493) 2024-03-04 14:50:52 +00:00
Siara
fe5669afcf Create a guide to using GitHub's security features to secure your use of GitHub Actions (#49383)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-03-01 22:42:28 +00:00
Peter Bengtsson
566191d008 Remove all ifversion that has all versions (4) (#49476) 2024-03-01 18:28:53 +00:00
mc
55c854e943 Use GitHub presets, not GitHub-curated rules (#49365)
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
2024-02-28 20:16:04 +00:00
Sarah Edwards
85ce4463c6 update titles for REST API repos docs (#49374) 2024-02-26 18:17:52 +00:00
mc
10872406c0 Correct GHAS offerings feature list (Dependabot auto-triage rules) (#49168)
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
2024-02-26 09:37:54 +00:00
Matt Pollard
cbac5cdd58 Remove content, data, and update fixtures (#49333) 2024-02-23 20:02:15 +00:00
mc
f0e2768ca9 Use variable for "dependency submission API" (#49191) 2024-02-14 11:11:20 +00:00
mc
4588d2ee91 Support for pub private registries with Dependabot - [GA] (#48876)
Co-authored-by: Caro Galvin <carogalvin@github.com>
2024-02-13 21:01:48 +00:00
mc
3914a064e2 Clarify Dependabot's version updates expected behavior for transitive dependencies (#49167)
Co-authored-by: Vanessa <vgrl@github.com>
2024-02-13 16:00:49 +00:00
mc
f2944bbb13 Improve documentation and support for devcontainers integration (#49163)
Co-authored-by: Vanessa <vgrl@github.com>
2024-02-13 07:36:18 +00:00
mc
0628d5aa19 Consolidate repo name/path (#49105) 2024-02-08 11:47:01 +00:00
gitulisca
22c9f9ce55 Add details on how Dependabot parses Docker image tags (#49006)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-02-08 10:53:15 +00:00
Peter Bengtsson
a4b9229f95 Remove GHAE in Liquid and front matter (23) (#49032) 2024-02-06 13:11:25 +00:00
mc
5263933016 Clarify the correct syntax for registries: "*" (#48917)
Co-authored-by: AbdulFattaah Popoola <abdulapopoola@github.com>
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
Co-authored-by: Fernando Ruiz Diaz <88462636+ferdlestier@users.noreply.github.com>
2024-01-31 15:02:59 +00:00
Peter Bengtsson
6114345361 Remove GHAE in Liquid and front matter (11) (#48859)
Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com>
2024-01-30 15:01:31 +00:00
mc
fb3b4112d7 Fix the documentation about paused Dependabot so it's accurate (#48851) 2024-01-27 10:00:11 +00:00
mc
0f050a9bbf Dependabot Version Updates Support devcontainers (#48232)
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
Co-authored-by: Josh Spicer <josh@joshspicer.com>
2024-01-24 19:32:01 +00:00
mc
9e39cd709b Update "Enabling Dependabot version updates" procedure with more detail about the dependabot.yml file. (#48808) 2024-01-24 19:25:17 +00:00
Peter Bengtsson
eb9571a80d Remove GHAE in Liquid and front matter (7) (#48772) 2024-01-23 13:12:04 +00:00
mc
51f8256e8f Improve and amend information about malware in Dependabot (#48626)
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
2024-01-18 11:48:29 +00:00
mc
9ef1dde80e Update Dependabot YML supported NuGet version (#48684) 2024-01-12 16:00:19 +00:00
mc
bc796a4829 Clarify what sources are supported for Terraform Dependency Updates (#48039) 2023-12-19 18:09:58 +00:00
Siara
8e87e845c2 Dependabot Grouped Security Updates - [Public Beta] (#47003)
Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
2023-12-07 18:47:12 +00:00
mc
5e25b3debe Dependabot Updates - enhanced NuGet support (#45876) 2023-11-28 20:53:19 +00:00
Vanessa
a270dec54b [2023-11-14][Deprecation] Changes to package manifests cause Dependabot to re-run failed jobs (#45650) 2023-11-14 15:03:00 +00:00
mc
2f32694261 Clarifying GitHub Actions support for Dependabot version updates (#45886) 2023-11-13 17:25:14 +00:00
Anne-Marie
0e6d70059c [Improvement]: Dependabot alert rules should be called Dependabot auto-triage rules #12669 (#45367)
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2023-11-06 10:53:34 +00:00
mc
eda3f6e5da Tidy-up feature-based versioning used for Dependabot auto-triage rules (#45171) 2023-10-30 09:51:22 +00:00
Anne-Marie
7d3db3d44f Dependabot alert rules: engine supports opening a PR / org-level rules - [Public Beta] #11068 (#44208)
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Erin Havens <erinhav@github.com>
2023-10-26 17:46:17 +00:00
Cory Calahan
d8b3a2d350 Fix list rendering for Dependabot Vulnerable Calls (#44346)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2023-10-16 07:08:39 +00:00
Surav Shrestha
e6259537aa docs: fix typos in data/reusables (#29135)
Co-authored-by: Steve Ward <steveward@github.com>
2023-10-13 18:00:37 +00:00
Anne-Marie
ad79b35666 [Improvement]: Highlight information on Dependabot's behaviour for multiple groups #12429 (#44212)
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
2023-10-13 09:48:20 +00:00
Vanessa
47e5cfe041 Dependabot alerts for actions that use semver (#44039)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2023-10-12 22:43:47 +00:00