Skip to content

Commit 22c9f9c

Browse files
Add details on how Dependabot parses Docker image tags (#49006)
Co-authored-by: mc <[email protected]>
1 parent a54a86a commit 22c9f9c

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

data/reusables/dependabot/supported-package-managers.md

+2
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,8 @@ In order for {% data variables.product.prodname_dependabot %} to fetch Docker me
6868
{% data variables.product.prodname_dependabot %} supports both public and private Docker registries. For a list of the supported registries, see "`docker-registry`" in "[AUTOTITLE](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#docker-registry)."
6969
{% endif %}
7070

71+
{% data variables.product.prodname_dependabot %} parses Docker image tags for Semantic Versioning ([SemVer](https://semver.org/)). If {% data variables.product.prodname_dependabot %} detects a tag with a pre-release, then it will only suggest an update to the latest version with a matching pre-release, and it will not suggest a newer version that use a different pre-release label. For more information, see the `dependabot-docker` [README.md](https://github.com/dependabot/dependabot-core/blob/main/docker/README.md) file in the `github/dependabot/dependabot-core` repository.
72+
7173
#### {% data variables.product.prodname_actions %}
7274

7375
{% data variables.product.prodname_dependabot %} only supports updates to {% data variables.product.prodname_actions %} using the {% data variables.product.prodname_dotcom %} repository syntax, such as `{% data reusables.actions.action-checkout %}`. {% data variables.product.prodname_dependabot %} will ignore actions or reusable workflows referenced locally (for example, `./.github/actions/foo.yml`).

0 commit comments

Comments
 (0)