docs(dependabot): distinguish private repositories from registries - #46044
aniruddhaadak80 wants to merge 1 commit into
Conversation
How to review these changes 👓Thank you for your contribution. To review these changes, choose one of the following options: A Hubber will need to deploy your changes internally to review. Table of review linksNote: Please update the URL for your staging server or codespace. The table shows the files in the
Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server 🤖 This comment is automatically generated. |
|
Hi, regrettably I'm going to close this out—we haven't marked this as ready for community contributions yet, and are yet to make a determination about the best way to tackle the problem. Apologies that this won't be the outcome you were hoping for |
Why:
Closes: #45681
The Dependabot support matrix has separate Private repositories and Private registries columns, but the article does not explain what each column represents. The surrounding guidance explains how to grant access to private repositories and configure private registries, but readers can still interpret “Private repositories” as the repository being updated rather than a repository that hosts dependencies. This distinction is important because support for one hosting type does not imply support for the other.
What's being changed (if available, include any code snippets, screenshots, or gifs):
registriesconfiguration.npm run build— passed.npm run lint-content -- --paths content/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories.md data/reusables/dependabot/supported-package-managers.md— passed with no errors.npm test -- src/content-linter/tests/lint-files.ts src/content-linter/tests/unit/table-column-integrity-simple.ts— 3469 tests passed.npm test -- src/content-render/tests/render-changed-and-deleted-files.ts— 2 tests passed.git diff --check— passed.Check off the following: