You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories.md
+11-13Lines changed: 11 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -45,23 +45,21 @@ If your repository already uses an integration for dependency management, you wi
45
45
46
46
{% data reusables.dependabot.supported-package-managers %}
47
47
48
-
### Known issue: Tag format for GitHub Actions in monorepos
48
+
##Why does {% data variables.product.prodname_dependabot %} sometimes fail to detect or update {% data variables.product.prodname_actions %} versions in monorepos?
49
49
50
-
If your repository contains multiple GitHub Actions (for example, in a monorepo), the tag format you use affects how {% data variables.product.prodname_dependabot %} detects and updates action versions.
50
+
If your repository contains multiple {% data variables.product.prodname_actions %} (for example, in a monorepo), the tag format you use affects how {% data variables.product.prodname_dependabot %} detects and updates action versions.
51
51
52
-
-**Dash (-) separator (for example, `@my-action-v0.1.0`):**
52
+
-**Dash (`-`) separator** (for example, `@my-action-v0.1.0`):
53
53
- {% data variables.product.prodname_dependabot %} may group multiple actions under a single dependency entry or fail to detect new versions correctly. This occurs because {% data variables.product.prodname_dependabot %} relies on slash-based tag parsing to distinguish between actions.
54
-
-**Slash (`/`) separator (for example, `@my-action/v0.1.0`):**
54
+
-**Slash (`/`) separator** (for example, `@my-action/v0.1.0`):
55
55
- {% data variables.product.prodname_dependabot %} correctly detects and updates each action independently, as the slash creates a hierarchical tag structure that aligns with {% data variables.product.prodname_dependabot %}'s parsing logic.
56
56
57
-
**Example**:
58
-
```yaml
59
-
# Recommended: namespaced with slash
60
-
uses: my-org/monorepo/my-action@my-action/v0.1.0
57
+
**Recommendation:** For monorepos with multiple actions, use the `name/version` (slash) format for action tags. This ensures {% data variables.product.prodname_dependabot %} can parse the tag hierarchy correctly and update actions independently.
61
58
62
-
# Not recommended: dash
63
-
uses: my-org/monorepo@my-action-v0.1.0
64
-
```
59
+
* Example:
60
+
```yaml
61
+
# Recommended: namespaced with slash
62
+
uses: my-org/monorepo/my-action@my-action/v0.1.0
65
63
66
-
**Recommendation:**
67
-
For monorepos with multiple actions, use the `name/version` (slash) format for action tags. This ensures {% data variables.product.prodname_dependabot %} can parse the tag hierarchy correctly and update actions independently.
0 commit comments