Skip to content

Navigation Menu

Sign in

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Add known case with monorepos #38273

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 2 commits into
base: main
Choose a base branch
Loading
from
Open

Add known case with monorepos #38273

wants to merge 2 commits into from
+21 −0

Conversation

dsotirakis
Copy link
Contributor

@dsotirakis dsotirakis commented May 14, 2025 •
edited
Loading

Why:

Closes: #38272
GitHub support ticket: #3380332

What's being changed (if available, include any code snippets, screenshots, or gifs):

Adds a small bit about update to monorepos where dependabot needs to take action. Looks like "namespaced" tags are better supported by git rather than tags with - as a separator.

Check off the following:

  • A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
  • The changes in this PR meet the docs fundamentals that are required for all content.
  • All CI checks are passing and the changes look good in the review environment.

@dsotirakis
Add known case with monorepos
11bbe78 
For monorepos, tag separated tags don't work with dependabot. Instead, slash separated tags are needed
@Copilot Copilot AI review requested due to automatic review settings May 14, 2025 13:02
@github-actions GitHub Actions
Copy link
Contributor

Thanks for submitting a PR to the GitHub Docs project!

In order to review and merge PRs most efficiently, we require that all PRs grant maintainer edit access before we review them. For information on how to do this, see the documentation.

Copilot
Copilot AI reviewed May 14, 2025
View reviewed changes
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds a documentation section for users of monorepos with GitHub Actions, explaining how tag formatting can impact Dependabot’s ability to properly detect and update action versions.

  • Introduces a new "Known issue: Tag format for GitHub Actions in monorepos" section.
  • Provides examples demonstrating why the dash (-) separator is not recommended and the slash (/) separator should be used.
  • Offers a clear recommendation to users for proper tag format usage in monorepos.

@github-actions github-actions bot added the triage Do not begin working on this issue until triaged by the team label May 14, 2025
@github-actions GitHub Actions
Copy link
Contributor

github-actions bot commented May 14, 2025 •
edited
Loading

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source Review Production What Changed
code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories.md fpt
ghec
ghes@ 3.16 3.15 3.14 3.13
fpt
ghec
ghes@ 3.16 3.15 3.14 3.13

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

@dsotirakis dsotirakis marked this pull request as draft May 14, 2025 13:04
@dsotirakis dsotirakis marked this pull request as ready for review May 14, 2025 13:06
@Sharra-writes
Copy link
Contributor

Thanks for opening a PR! I'll get this triaged for review.

@Sharra-writes Sharra-writes added content This issue or pull request belongs to the Docs Content team dependabot Content related to Dependabot needs SME This proposal needs review from a subject matter expert and removed triage Do not begin working on this issue until triaged by the team labels May 14, 2025
@github-actions GitHub Actions
Copy link
Contributor

Thanks for opening a pull request! We've triaged this issue for technical review by a subject matter expert 👀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

Copilot code review Copilot Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
content This issue or pull request belongs to the Docs Content team dependabot Content related to Dependabot needs SME This proposal needs review from a subject matter expert
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Update documentation for dependabot version updates in monorepos
2 participants
@dsotirakis @Sharra-writes
Morty Proxy This is a proxified and sanitized view of the page, visit original site.