From 43e66ccba43730712fc58d5a75a453939955c2c8 Mon Sep 17 00:00:00 2001 From: mc <42146119+mchammer01@users.noreply.github.com> Date: Tue, 9 Jul 2024 08:10:31 +0200 Subject: [PATCH] Address Dependabot multi-directory vs. grouping customer confusion (#51348) Co-authored-by: Vanessa Co-authored-by: Caro Galvin Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com> Co-authored-by: Nish Sinha Co-authored-by: Carlin Cherry <61124041+carlincherry@users.noreply.github.com> --- .../configuration-options-for-the-dependabot.yml-file.md | 8 ++++++++ .../reusables/dependabot/multidirectory-vs-pr-grouping.md | 5 +++++ 2 files changed, 13 insertions(+) create mode 100644 data/reusables/dependabot/multidirectory-vs-pr-grouping.md diff --git a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md index 823d88351aff..465969e5aca5 100644 --- a/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md +++ b/content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md @@ -239,6 +239,8 @@ updates: interval: "weekly" ``` +{% data reusables.dependabot.multidirectory-vs-pr-grouping %} For more information about grouping, see "[`groups`](#groups)." + {% endif %} ### `schedule.interval` @@ -459,6 +461,12 @@ You can also manage pull requests for grouped version updates and security updat {% data reusables.dependabot.dependabot-version-updates-groups-yaml-example %} +{% ifversion dependabot-grouped-security-updates-config %} + +{% data reusables.dependabot.multidirectory-vs-pr-grouping %} For more information about multidirectory support, see "[`directories`](#directories)." + +{% endif %} + {% endif %} ### `ignore` diff --git a/data/reusables/dependabot/multidirectory-vs-pr-grouping.md b/data/reusables/dependabot/multidirectory-vs-pr-grouping.md new file mode 100644 index 000000000000..5d4b30736769 --- /dev/null +++ b/data/reusables/dependabot/multidirectory-vs-pr-grouping.md @@ -0,0 +1,5 @@ +Multidirectory support is different than update grouping in pull requests. +* The `directories` option in the `dependabot.yml` file allows you to apply {% data variables.product.prodname_dependabot_updates %} to multiple directories at the same time. +* The `groups` option in the `dependabot.yml` file creates sets of dependencies (per package manager) for {% data variables.product.prodname_dependabot %} to put in the same single pull request. + +If you want to use both features on your repositories, you need to enable these features independently and explicitly by using the two keys described above.