25 lines
4.9 KiB
Markdown
25 lines
4.9 KiB
Markdown
| Option | Required | Security Updates | Version Updates | Description |
|
|
|:---|:---:|:---:|:---:|:---|
|
|
| [`package-ecosystem`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem) | **X** | | X | Package manager to use |
|
|
| [`directory`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#directory) | **X** | | X | Location of package manifests |
|
|
| [`schedule.interval`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#scheduleinterval) | **X** | | X | How often to check for updates |
|
|
| [`allow`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#allow) | | X | X | Customize which updates are allowed |
|
|
| [`assignees`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#assignees) | | X | X | Assignees to set on pull requests |
|
|
| [`commit-message`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#commit-message) | | X | X | Commit message preferences |{% ifversion fpt or ghec or ghes > 3.4 %}
|
|
| [`enable-beta-ecosystems`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#enable-beta-ecosystems) | | | X | Enable ecosystems that have beta-level support |{% endif %}
|
|
| [`ignore`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore) | | X | X | Ignore certain dependencies or versions |
|
|
| [`insecure-external-code-execution`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#insecure-external-code-execution) | | | X | Allow or deny code execution in manifest files |
|
|
| [`labels`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#labels) | | X | X | Labels to set on pull requests |
|
|
| [`milestone`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#milestone) | | X | X | Milestone to set on pull requests |
|
|
| [`open-pull-requests-limit`](#open-pull-requests-limit) | | X | X | Limit number of open pull requests for version updates |
|
|
| [`pull-request-branch-name.separator`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#pull-request-branch-nameseparator) | | X | X | Change separator for pull request branch names |
|
|
| [`rebase-strategy`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#rebase-strategy) | | X | X | Disable automatic rebasing |
|
|
| [`registries`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#registries) | | | X | Private registries that {% data variables.product.prodname_dependabot %} can access|
|
|
| [`reviewers`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#reviewers) | | X | X | Reviewers to set on pull requests |
|
|
| [`schedule.day`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#scheduleday) | | | X | Day of week to check for updates |
|
|
| [`schedule.time`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#scheduletime) | | | X | Time of day to check for updates (hh:mm) |
|
|
| [`schedule.timezone`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#scheduletimezone) | | | X | Timezone for time of day (zone identifier) |
|
|
| [`target-branch`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#target-branch) | | X | X | Branch to create pull requests against |
|
|
| [`vendor`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#vendor) | | | X | Update vendored or cached dependencies |
|
|
| [`versioning-strategy`](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#versioning-strategy) | | X | X | How to update manifest version requirements |
|