From be5b4e211f8e34c67ca7a79ad1195f0726ca1964 Mon Sep 17 00:00:00 2001 From: Aniruddha Adak Date: Thu, 24 Sep 2026 19:34:10 +0530 Subject: [PATCH] docs(dependabot): distinguish private repositories from registries Closes #45681 --- .../supported-ecosystems-and-repositories.md | 3 +++ data/reusables/dependabot/supported-package-managers.md | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/content/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories.md b/content/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories.md index db082e17a897..e867d0b236ce 100644 --- a/content/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories.md +++ b/content/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories.md @@ -23,6 +23,9 @@ This article provides reference information about the package ecosystems and rep You can configure updates for repositories that contain a dependency manifest or lock file for one of the supported package managers. For some package managers, you can also configure vendoring for dependencies. For more information, see [`vendor`](/code-security/reference/supply-chain-security/dependabot-options-reference#vendor--). {% data variables.product.prodname_dependabot %} also supports dependencies in private registries. For more information, see [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries). + +The **Private Git repositories** column refers to repositories that contain dependencies, while the **Private registries** column refers to registries that host packages. Both are forms of private dependencies, and support for one does not imply support for the other. + {% ifversion ghes %} > [!NOTE] diff --git a/data/reusables/dependabot/supported-package-managers.md b/data/reusables/dependabot/supported-package-managers.md index d3f3716f5143..218239eccb0c 100644 --- a/data/reusables/dependabot/supported-package-managers.md +++ b/data/reusables/dependabot/supported-package-managers.md @@ -1,6 +1,6 @@ -Package manager | YAML value | Supported versions | Version updates | Security updates | Private repositories | Private registries | Vendoring | +Package manager | YAML value | Supported versions | Version updates | Security updates | Private Git repositories | Private registries | Vendoring | ---------------|------------------|------------------|:---:|:---:|:---:|:---:|:---:| | {% ifversion dependabot-bazel-support %} | Bazel | `bazel` | v7, v8, v9 | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} |