Skip to content

Commit 6d7770e

Browse files
authored
Add git-ref bits
1 parent 11bbe78 commit 6d7770e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

content/code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -50,9 +50,9 @@ If your repository already uses an integration for dependency management, you wi
5050
If your repository contains multiple GitHub Actions (for example, in a monorepo), the tag format you use affects how {% data variables.product.prodname_dependabot %} detects and updates action versions.
5151

5252
- **Dash (-) separator (e.g. my-action-v0.1.0):**
53-
- Dependabot may incorrectly update multiple actions or fail to detect new versions.
53+
- {% data variables.product.prodname_dependabot %} may incorrectly update multiple actions or fail to detect new versions. This occurs because {% data variables.product.prodname_dependabot %} relies on Git’s hierarchical tag structure (using slashes) to distinguish between actions.
5454
- **Slash (`/`) separator (e.g., `my-action/v0.1.0`):**
55-
- Dependabot correctly detects and updates each action independently
55+
- {% data variables.product.prodname_dependabot %} correctly detects and updates each action independently, as the slash creates a hierarchical tag that aligns with Git’s ref format rules.
5656

5757
**Example**:
5858
```yaml
@@ -64,4 +64,4 @@ uses: my-org/my-action-a-v0.1.0
6464
```
6565
6666
**Recommendation:**
67-
For monorepos with multiple actions, use the `name/version` (slash) format for action tags to ensure accurate {% data variables.product.prodname_dependabot %} updates.
67+
For monorepos with multiple actions, use the `name/version` (slash) format for action tags. This ensures {% data variables.product.prodname_dependabot %} can parse the tag hierarchy correctly and update actions independently.

0 commit comments

Comments
 (0)