Skip to content

docs(dependabot): correct security update scope - #46758

Merged
mchammer01 merged 2 commits into
github:mainfrom
awais-ur-rehman:feat/dependabot-security-target-docs
Oct 31, 2026
Merged

mchammer01 merged 2 commits into
github:mainfrom
awais-ur-rehman:feat/dependabot-security-target-docs

Conversation

@awais-ur-rehman

@awais-ur-rehman awais-ur-rehman commented Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Why:

Closes #46515

The security-updates list contradicts the target-branch reference and the maintainer's clarification in the issue.

What's being changed (if available, include any code snippets, screenshots, or gifs):

Remove the bullet saying target branches can be defined for security updates. The remaining list is unchanged.

Validation: the repository content linter passes for the changed article. No product code or configuration changes.

Prepared with OpenAI Codex assistance.

Check off the following:

  • A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
  • The changes in this PR meet the docs fundamentals that are required for all content.
  • All CI checks are passing and the changes look good in the review environment.

@github-actions github-actions Bot added the triage Do not begin working on this issue until triaged by the team label Oct 30, 2026
@github-actions

github-actions Bot commented Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source Review Production What Changed
code-security/concepts/supply-chain-security/about-the-dependabot-yml-file.md fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18
fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

@subatoi subatoi added content This issue or pull request belongs to the Docs Content team dependabot Content related to Dependabot driver persona and removed triage Do not begin working on this issue until triaged by the team labels Oct 30, 2026

@mchammer01 mchammer01 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for fixing this ✨
LGTM 👍🏻

@mchammer01
mchammer01 enabled auto-merge October 31, 2026 07:36
@mchammer01
mchammer01 added this pull request to the merge queue Oct 31, 2026
Merged via the queue into github:main with commit 33b1f4a Oct 31, 2026
62 of 101 checks passed
@github-actions

Copy link
Copy Markdown
Contributor

Thanks very much for contributing! Your pull request has been merged 🎉 You should see your changes appear on the site in approximately 24 hours. If you're looking for your next contribution, check out our help wanted issues ⚡

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

content This issue or pull request belongs to the Docs Content team dependabot Content related to Dependabot driver persona

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Clarify conflicting documentation on Dependabot security updates and target branches

3 participants