Skip to content

Commit 9b966d0

Browse files
OctomergerOctomerger
authored
Merge pull request github#22065 from github/repo-sync
repo sync
2 parents 9ea4c32 + bc92535 commit 9b966d0

File tree

2 files changed

+27
-15
lines changed

2 files changed

+27
-15
lines changed

‎data/features/dependabot-version-updates-enhanced-docker-support.yml

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
# Reference: Issue #8544
2+
# Title: Dependabot support for updating Docker image tags in Kubernetes manifests
3+
4+
versions:
5+
fpt: '*'
6+
ghec: '*'
7+
ghes: '>= 3.8'

‎data/reusables/dependabot/supported-package-managers.md

+20-15
Original file line numberDiff line numberDiff line change
@@ -9,23 +9,23 @@ Package manager | YAML value | Supported versions | Private repositories |
99
Bundler | `bundler` | v1, v2 | | **✓** | **✓** |
1010
Cargo | `cargo` | v1 | **✓** | **✓** | |
1111
Composer | `composer` | v1, v2 | **✓** | **✓** | |
12-
Docker | `docker` | v1 | **✓** | **✓** | |
12+
Docker {% ifversion dependabot-version-updates-enhanced-docker-support %}<sup>[1]</sup>{% endif %} | `docker` | v1 | **✓** | **✓** | |
1313
Hex | `mix` | v1 | | **✓** | |
1414
elm-package | `elm` | v0.19 | **✓** | **✓** | |
1515
git submodule | `gitsubmodule` | N/A (no version) | **✓** | **✓** | |
1616
GitHub Actions | `github-actions` | N/A (no version) | **✓** | **✓** | |
1717
Go modules | `gomod` | v1 | **✓** | **✓** | **✓** |
18-
Gradle | `gradle` | N/A (no version)<sup>[1]</sup> | **✓** | **✓** | |
19-
Maven | `maven` | N/A (no version)<sup>[2]</sup> | **✓** | **✓** | |
18+
Gradle | `gradle` | N/A (no version)<sup>[2]</sup> | **✓** | **✓** | |
19+
Maven | `maven` | N/A (no version)<sup>[3]</sup> | **✓** | **✓** | |
2020
npm | `npm` | v6, v7, v8 | **✓** | **✓** | |
21-
NuGet | `nuget` | <= 4.8<sup>[3]</sup> | **✓** | **✓** | |
21+
NuGet | `nuget` | <= 4.8<sup>[4]</sup> | **✓** | **✓** | |
2222
pip{% ifversion dependabot-PEP621-support %}<sup>[5]</sup>{% endif %} | `pip` | v21.1.2 | | **✓** | |
2323
pipenv | `pip` | <= 2021-05-29 | | **✓** | |
2424
pip-compile{% ifversion dependabot-PEP621-support %}<sup>[5]</sup>{% endif %} | `pip` | 6.1.0 | | **✓** | |
2525
poetry | `pip` | v1 | | **✓** | |{% ifversion fpt or ghec or ghes > 3.4 %}
26-
pub | `pub` | v2 <sup>[4]</sup> | | | |{% endif %}
26+
pub | `pub` | v2 <sup>[6]</sup> | | | |{% endif %}
2727
Terraform | `terraform` | >= 0.13, <= 1.2.x | **✓** | **✓** | |
28-
{% ifversion dependabot-yarn-v3-update %}yarn | `npm` | v1, v2, v3 | **✓** | **✓** | **✓**<sup>[6]</sup> |{% else %}yarn | `npm` | v1 | **✓** | **✓** | |
28+
{% ifversion dependabot-yarn-v3-update %}yarn | `npm` | v1, v2, v3 | **✓** | **✓** | **✓**<sup>[7]</sup> |{% else %}yarn | `npm` | v1 | **✓** | **✓** | |
2929
{% endif %}
3030

3131
{% tip %}
@@ -34,25 +34,30 @@ Terraform | `terraform` | >= 0.13, <= 1.2.x | **✓** | **✓** | |
3434

3535
{% endtip %}
3636

37-
[1] {% data variables.product.prodname_dependabot %} doesn't run Gradle but supports updates to the following files: `build.gradle`, `build.gradle.kts` (for Kotlin projects), and files included via the `apply` declaration that have `dependencies` in the filename. Note that `apply` does not support `apply to`, recursion, or advanced syntaxes (for example, Kotlin's `apply` with `mapOf`, filenames defined by property).
37+
{% ifversion dependabot-version-updates-enhanced-docker-support %}
38+
[1] {% data variables.product.prodname_dependabot %} can update Docker image tags in Kubernetes manifests. Add an entry to the Docker `package-ecosystem` element of your _dependabot.yml_ file for each directory containing a Kubernetes manifest which references Docker image tags. Kubernetes manifests can be Kubernetes Deployment YAML files or Helm charts. For information about configuring your _dependabot.yml_ file for `docker`, see "`package-ecosystem`" in "[Configuration options for the dependabot.yml file](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem)."
3839

39-
[2] {% data variables.product.prodname_dependabot %} doesn't run Maven but supports updates to `pom.xml` files.
40+
{% data variables.product.prodname_dependabot %} supports both public and private Docker registries. For a list of the supported registries, see "`docker-registry`" in "[Configuration options for the dependabot.yml file](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#docker-registry)."
41+
{% endif %}
42+
43+
[2] {% data variables.product.prodname_dependabot %} doesn't run Gradle but supports updates to the following files: `build.gradle`, `build.gradle.kts` (for Kotlin projects), and files included via the `apply` declaration that have `dependencies` in the filename. Note that `apply` does not support `apply to`, recursion, or advanced syntaxes (for example, Kotlin's `apply` with `mapOf`, filenames defined by property).
44+
45+
[3] {% data variables.product.prodname_dependabot %} doesn't run Maven but supports updates to `pom.xml` files.
4046

41-
[3] {% data variables.product.prodname_dependabot %} doesn't run the NuGet CLI but does support most features up until version 4.8.
47+
[4] {% data variables.product.prodname_dependabot %} doesn't run the NuGet CLI but does support most features up until version 4.8.
48+
49+
{% ifversion dependabot-PEP621-support %}
50+
[5] In addition to supporting updates to `requirements.txt` files, {% data variables.product.prodname_dependabot %} supports updates to `pyproject.toml` files if they follow the PEP 621 standard. {% endif %}
4251

4352
{% ifversion fpt or ghec or ghes > 3.4 %}
44-
[4] {% ifversion ghes = 3.5 %}`pub` support is currently in beta. Any known limitations are subject to change. Note that {% data variables.product.prodname_dependabot %}:
53+
[6] {% ifversion ghes = 3.5 %}`pub` support is currently in beta. Any known limitations are subject to change. Note that {% data variables.product.prodname_dependabot %}:
4554
- Doesn't support updating git dependencies for `pub`.
4655
- Won't perform an update when the version that it tries to update to is ignored, even if an earlier version is available.
4756

4857
For information about configuring your _dependabot.yml_ file for `pub`, see "[Enabling support for beta-level ecosystems](/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#enable-beta-ecosystems)."
4958
{%- else %}{% data variables.product.prodname_dependabot %} won't perform an update for `pub` when the version that it tries to update to is ignored, even if an earlier version is available.{% endif %}
5059
{% endif %}
5160

52-
53-
{% ifversion dependabot-PEP621-support %}
54-
[5] In addition to supporting updates to `requirements.txt` files, {% data variables.product.prodname_dependabot %} supports updates to `pyproject.toml` files if they follow the PEP 621 standard. {% endif %}
55-
5661
{% ifversion dependabot-yarn-v3-update %}
57-
[6] Dependabot supports vendored dependencies for v2 onwards.{% endif %}
62+
[7] Dependabot supports vendored dependencies for v2 onwards.{% endif %}
5863

0 commit comments

Comments
 (0)