Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
25 commits
Select commit Hold shift + click to select a range
2f66afb
Adding help page for switch to Github-native Dependabot
saritai Apr 2, 2021
cca18b1
Merge branch 'main' into dependabot-preview-shutdown
saritai Apr 2, 2021
6fe4f14
updated intro to include more information
saritai Apr 2, 2021
5700462
Merge branch 'dependabot-preview-shutdown' of https://github.com/gith…
saritai Apr 2, 2021
db374e1
Merge branch 'main' into dependabot-preview-shutdown
saritai Apr 2, 2021
3655e0b
added frontmatter regarding title to fix failing test
saritai Apr 2, 2021
99df60b
reconciled filename to url
saritai Apr 2, 2021
bfc80e2
fixed wrong url
saritai Apr 2, 2021
f1833dd
adding suggestion from PR
saritai Apr 2, 2021
a9c2180
Incorporating review suggestions
saritai Apr 5, 2021
bb1ca99
Merge branch 'main' into dependabot-preview-shutdown
saritai Apr 5, 2021
c4be7e0
Merge branch 'main' into dependabot-preview-shutdown
saritai Apr 5, 2021
c79ef79
Fixing PR name and intro error
saritai Apr 5, 2021
284b033
Merge branch 'dependabot-preview-shutdown' of https://github.com/gith…
saritai Apr 5, 2021
3cd22b3
Fixed procedure
saritai Apr 5, 2021
0406fb7
Added links to issues on public roadmap
saritai Apr 5, 2021
6557a30
Removing references to shutdown, will add back in when announcing the…
asciimike Apr 22, 2021
71889bc
Merge branch 'main' into repo-sync
Octomerger Apr 22, 2021
9120b02
Merge pull request #18940 from github/repo-sync
Octomerger Apr 22, 2021
147b1c3
Removed extra period
saritai Apr 22, 2021
3bc6dc8
Merge branch 'main' into dependabot-preview-shutdown
saritai Apr 22, 2021
e205710
Merge branch 'main' into repo-sync
Octomerger Apr 22, 2021
b3f655d
Merge pull request #18568 from github/dependabot-preview-shutdown
saritai Apr 22, 2021
d69c21d
Branch was updated using the 'autoupdate branch' Actions workflow.
Octomerger Apr 22, 2021
462b905
Merge pull request #18941 from github/repo-sync
Octomerger Apr 22, 2021
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Added links to issues on public roadmap
  • Loading branch information
saritai committed Apr 5, 2021
commit 0406fb749653bb5dedff0de093570f40bec6ba44
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ topics:

### About upgrading from Dependabot Preview to {% data variables.product.prodname_dotcom %}-native {% data variables.product.prodname_dependabot %}

The majority of Dependabot Preview features have now been built directly into {% data variables.product.prodname_dotcom %}, so you can use {% data variables.product.prodname_dependabot %} alongside all the other functionality in {% data variables.product.prodname_dotcom %} without having to go to a separate application. By migrating to {% data variables.product.prodname_dotcom %}-native {% data variables.product.prodname_dependabot %} and shutting down Dependabot Preview, we can also focus on bringing lots of exciting new features to {% data variables.product.prodname_dependabot %}, including more ecosystem updates, improved notifications, and {% data variables.product.prodname_dependabot %} support for {% data variables.product.prodname_ghe_server %} and {% data variables.product.prodname_ghe_managed %}.
The majority of Dependabot Preview features have now been built directly into {% data variables.product.prodname_dotcom %}, so you can use {% data variables.product.prodname_dependabot %} alongside all the other functionality in {% data variables.product.prodname_dotcom %} without having to go to a separate application. By migrating to {% data variables.product.prodname_dotcom %}-native {% data variables.product.prodname_dependabot %} and shutting down Dependabot Preview, we can also focus on bringing lots of exciting new features to {% data variables.product.prodname_dependabot %}, including more [ecosystem updates](https://github.com/github/roadmap/issues/150), [improved notifications](https://github.com/github/roadmap/issues/133), and {% data variables.product.prodname_dependabot %} support for [{% data variables.product.prodname_ghe_server %}](https://github.com/github/roadmap/issues/86) and [{% data variables.product.prodname_ghe_managed %}](https://github.com/github/roadmap/issues/135).

### Shutdown timeline for Dependabot.com and Dependabot Preview

Expand All @@ -24,7 +24,7 @@ While we built most of the Dependabot Preview features into {% data variables.pr
- **PHP environment variable and Elixir organization registries:** These features have not been added due to low usage in Dependabot Preview, but we are investigating if there are other solutions. For now, you can use {% data variables.product.prodname_actions %} to fetch dependencies from these registries.
- **Auto-merge:** Auto-merge will not be supported for the foreseeable future. We know some of you have built great workflows that rely on auto-merge, but we’re concerned about auto-merge being used to quickly propagate a malicious package across millions of developers. For those of you who have vetted your dependencies, or are only using internal dependencies, you can install third party auto-merge apps, or set up {% data variables.product.prodname_actions %} to merge. We recommend always verifying your dependencies before merging them.

In {% data variables.product.prodname_dotcom %}-native {% data variables.product.prodname_dependabot %}, you can configure all version updates using the configuration file. This file is similar to the Dependabot Preview configuration file with a few changes and improvements that will be automatically included in your upgrade pull request.
In {% data variables.product.prodname_dotcom %}-native {% data variables.product.prodname_dependabot %}, you can configure all version updates using the configuration file. This file is similar to the Dependabot Preview configuration file with a few changes and improvements that will be automatically included in your upgrade pull request. For more information about the upgrade pull request, see "[Upgrading to GitHub-native Dependabot](/code-security/supply-chain-security/upgrading-from-dependabotcom-to-github-native-dependabot#upgrading-to-github-native-dependabot)".

To see update logs for {% data variables.product.prodname_dotcom %}-native {% data variables.product.prodname_dependabot %} that were previously on the Dependabot.com dashboard:

Expand Down