Skip to content

Commit 58e55dd

Browse files
authored
[Improvement]: Clarify syntax for defining a version range to ignore in dependabot.yml #9285 (#34553)
1 parent ba844be commit 58e55dd

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -322,7 +322,7 @@ For more information about the `@dependabot ignore` commands, see "[Managing pul
322322
You can use the `ignore` option to customize which dependencies are updated. The `ignore` option supports the following options.
323323

324324
- `dependency-name`—use to ignore updates for dependencies with matching names, optionally using `*` to match zero or more characters. For Java dependencies, the format of the `dependency-name` attribute is: `groupId:artifactId` (for example: `org.kohsuke:github-api`). {% ifversion dependabot-grouped-dependencies %} To prevent {% data variables.product.prodname_dependabot %} from automatically updating TypeScript type definitions from DefinitelyTyped, use `@types/*`.{% endif %}
325-
- `versions`—use to ignore specific versions or ranges of versions. If you want to define a range, use the standard pattern for the package manager (for example: `^1.0.0` for npm, or `~> 2.0` for Bundler).
325+
- `versions`—use to ignore specific versions or ranges of versions. If you want to define a range, use the standard pattern for the package manager. For example, for npm, use `^1.0.0`; for Bundler, use `~> 2.0`; for Docker, use Ruby version syntax.
326326
- `update-types`—use to ignore types of updates, such as semver `major`, `minor`, or `patch` updates on version updates (for example: `version-update:semver-patch` will ignore patch updates). You can combine this with `dependency-name: "*"` to ignore particular `update-types` for all dependencies. Currently, `version-update:semver-major`, `version-update:semver-minor`, and `version-update:semver-patch` are the only supported options. Security updates are unaffected by this setting.
327327

328328
If `versions` and `update-types` are used together, {% data variables.product.prodname_dependabot %} will ignore any update in either set.

0 commit comments

Comments
 (0)