Skip to content

Commit d859b78

Browse files
tallzeebaaCopilotmchammer01
authored
Hide Dependabot cooldown option from GHES documents (#58014)
Co-authored-by: Copilot <[email protected]> Co-authored-by: mc <[email protected]>
1 parent c3d9747 commit d859b78

File tree

3 files changed

+14
-0
lines changed

3 files changed

+14
-0
lines changed

content/code-security/dependabot/dependabot-version-updates/optimizing-pr-creation-version-updates.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,8 @@ updates:
5858
5959
See also [schedule](/code-security/dependabot/working-with-dependabot/dependabot-options-reference#schedule-).
6060
61+
{% ifversion dependabot-option-cooldown %}
62+
6163
### Setting up a cooldown period for dependency updates
6264
6365
You can use `cooldown` with a combination of options to control when {% data variables.product.prodname_dependabot %} creates pull requests for **version updates**.
@@ -102,6 +104,8 @@ SemVer is supported for most package managers. Updates to new versions for depen
102104

103105
See also [`cooldown`](/code-security/dependabot/working-with-dependabot/dependabot-options-reference#cooldown-).
104106

107+
{% endif %}
108+
105109
## Prioritizing meaningful updates
106110

107111
You can use `groups` to consolidate updates for multiple dependencies into a single pull request. This helps you focus your review time on higher risk updates, and minimize the time spent reviewing minor version updates. For example, you can combine updates for minor or patch updates for development dependencies into a single pull request, and have a dedicated group for security or version updates that impact a key area of your codebase.

content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -167,6 +167,8 @@ Supported by: `bundler`, `composer`, `mix`, `maven`, `npm`, and `pip`.
167167
* Supports only the value `scope`
168168
* When defined any prefix is followed by the type of dependencies updated in the commit: `deps` or `deps-dev`.
169169

170+
{% ifversion dependabot-option-cooldown %}
171+
170172
## `cooldown` {% octicon "versions" aria-label="Version updates" height="24" %}
171173

172174
Defines a **cooldown period** for dependency updates, allowing updates to be delayed for a configurable number of days.
@@ -234,6 +236,8 @@ The table below shows the package managers for which SemVer is supported.
234236
> * If `semver-major-days`, `semver-minor-days`, or `semver-patch-days` are not defined, the `default-days` settings will take precedence for cooldown-based updates.
235237
> * The `exclude` list always take precedence over the `include` list. If a dependency is specified in both lists, it is **excluded from cooldown** and will be updated immediately.
236238

239+
{% endif %}
240+
237241
## `directories` or `directory` {% octicon "versions" aria-label="Version updates" height="24" %} {% octicon "shield-check" aria-label="Security updates" height="24" %}
238242

239243
**Required option**. Use to define the location of the package manifests for each package manager (for example, the _package.json_ or _Gemfile_). Without this information {% data variables.product.prodname_dependabot %} cannot create pull requests for version updates. For examples, see [Defining multiple locations for manifest files](/code-security/dependabot/dependabot-version-updates/controlling-dependencies-updated#defining-multiple-locations-for-manifest-files).
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
# References:
2+
# Issue #19055 - Dependabot updates ecosystem support [GA]
3+
versions:
4+
fpt: '*'
5+
ghec: '*'
6+
ghes: '>3.19'

0 commit comments

Comments
 (0)