From 412c5c68abf3c38237730146c80b7f77858ae487 Mon Sep 17 00:00:00 2001 From: osa22 Date: Tue, 19 Mar 2024 14:37:05 -0400 Subject: [PATCH 1/2] Update configuration-options-for-the-dependabot.yml-file.md Include ignore example for `github-action` package-echo system. Ref: https://github.zendesk.com/agent/tickets/2318990 and --- .../configuration-options-for-the-dependabot.yml-file.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md index 7b8333302a8d..d4d286768c67 100644 --- a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md +++ b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md @@ -418,6 +418,15 @@ updates: # For AWS SDK, ignore all patch updates for version updates only - dependency-name: "aws-sdk" update-types: ["version-update:semver-patch"] + + # Example with github-actions + - package-ecosystem: 'github-actions' + directory: '/' + schedule: + interval: 'weekly' + ignore: + - dependency-name: 'actions/checkout' + versions: '>= 3' ``` {% note %} From 43925d924187ec257ca9cdfbf43217d0c685b9fa Mon Sep 17 00:00:00 2001 From: Vanessa Date: Fri, 22 Mar 2024 08:01:27 +1000 Subject: [PATCH 2/2] Update content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md --- .../configuration-options-for-the-dependabot.yml-file.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md index d4d286768c67..211f5fd91b23 100644 --- a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md +++ b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md @@ -418,14 +418,13 @@ updates: # For AWS SDK, ignore all patch updates for version updates only - dependency-name: "aws-sdk" update-types: ["version-update:semver-patch"] - - # Example with github-actions - package-ecosystem: 'github-actions' directory: '/' schedule: interval: 'weekly' ignore: - dependency-name: 'actions/checkout' + # For GitHub Actions, ignore all updates greater than or equal to version 3 versions: '>= 3' ```