-
Notifications
You must be signed in to change notification settings - Fork 62.2k
feat(docs): make reviewers retired option in dependabot's page #39030
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR updates the Dependabot documentation to inform users that the reviewers option has been retired in favor of the CODEOWNERS configuration.
- Adds an important callout in the reviewers section
- Provides links to the updated CODEOWNERS documentation and the related blog post
Comments suppressed due to low confidence (1)
content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md:462
- [nitpick] Consider rephrasing the added note for enhanced clarity. For example, explicitly state that as of Tuesday, May 20, 2025, the reviewers option is deprecated in favor of CODEOWNERS to guide users more directly.
> This feature is retired from `dependabot.yml` and overlaps with [CODEOWNERS](/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners.md) file from Tuesday, May 20, 2025. For more information, read our [blog](https://github.blog/changelog/2025-04-29-dependabot-reviewers-configuration-option-being-replaced-by-code-owners/).
How to review these changes 👓Thank you for your contribution. To review these changes, choose one of the following options: A Hubber will need to deploy your changes internally to review. Table of review linksNote: Please update the URL for your staging server or codespace. The table shows the files in the
Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server 🤖 This comment is automatically generated. |
I am not sure how to describe this situtation in docs page (and what to do), because:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
PR Checks throw errors with external link to GitHub's official blog:
https://github.com/github/docs/actions/runs/15842617146/job/44657954938?pr=39030
Is there any way to bypass them? I understand that external links are NOT welcome in this docs repo, but I need to reference GitHub's official resources in page, so user could get required context.
content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md
Outdated
Show resolved
Hide resolved
@Falcion Thanks for opening an issue/PR! I'll get writers on the team to review this for adherence to our style guide, and I'll look into the the link check failure. Copilot is telling me that 7 links are failing, and since you haven't updated 7 links, it's possible it's a problem with the test. That particular test has been a bit buggy in the past, so it wouldn't be unprecedented. |
…dabot-options-reference.md Co-authored-by: Matyas Sandor <53257021+sandormatyas@users.noreply.github.com>
Why:
Dependabot's config (
dependabot.yml
) from May 20, 2025 requires you to useCODEOWNERS
instead ofreviewers
field. This feature is retired from Dependabot.Closes #39033
https://github.blog/changelog/2025-04-29-dependabot-reviewers-configuration-option-being-replaced-by-code-owners/
What's being changed (if available, include any code snippets, screenshots, or gifs):
Changed
content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md
to include "Important" note about retired functionality.Check off the following: