Skip to content

Commit 0690ca2

Browse files
Add sbt support to dependabot version updates (#61331)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
1 parent 836115f commit 0690ca2

4 files changed

Lines changed: 34 additions & 0 deletions

File tree

content/code-security/reference/supply-chain-security/dependabot-options-reference.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -264,6 +264,9 @@ The table below shows the package managers that support `cooldown`. The `default
264264
| {% ifversion dependabot-rust-toolchain-support %} |
265265
| Rust toolchain | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} |
266266
| {% endif %} |
267+
| {% ifversion dependabot-sbt-support %} |
268+
| sbt | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} |
269+
| {% endif %} |
267270
| Swift | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} |
268271
| Terraform | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} |
269272
| UV | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} |
@@ -595,6 +598,9 @@ Package manager | YAML value | Supported versions |
595598
| {% ifversion dependabot-rust-toolchain-support %} |
596599
| Rust toolchain | `rust-toolchain` | Not applicable |
597600
| {% endif %} |
601+
| {% ifversion dependabot-sbt-support %} |
602+
| sbt | `sbt` | Not applicable |
603+
| {% endif %} |
598604
| Swift | `swift` | v5 |
599605
| Terraform | `terraform` | >= 0.13, <= 1.10.x |
600606
| {% ifversion dependabot-uv-support %} |
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
# Reference: https://github.com/dependabot/dependabot-core/pull/15012
2+
# sbt support for Dependabot
3+
versions:
4+
fpt: '*'
5+
ghec: '*'
6+
ghes: '>3.21'

data/reusables/dependabot/dependabot-updates-supported-versioning-tags.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,4 +9,7 @@ The `dependabot.yml` file doesn't control the versioning tags that you can use,
99
| Maven | `maven` | `alpha, a, beta, b, milestone, m, rc, cr, sp, ga, final, release, snapshot` | `spring-security-web@5.6.0-SNAPSHOT`, `spring-core@5.2.0.RELEASE` |
1010
| npm | `npm` | `alpha`, `beta`, `canary`, `dev`, `experimental`, `latest`, `legacy`, `next`, `nightly`, `rc`, `release`, `stable` | `lodash@beta`, `react@latest`, `express@next` |
1111
| pnpm | `npm` | `alpha`, `beta`, `canary`, `dev`, `experimental`, `latest`, `legacy`, `next`, `nightly`, `rc`, `release`, `stable` | `lodash@1.2.0-alpha`, `react@alpha`, `vue@next` |
12+
| {% ifversion dependabot-sbt-support %} |
13+
| sbt | `sbt` | `alpha, a, beta, b, milestone, m, rc, cr, sp, ga, final, release, snapshot` | `akka-actor@2.7.0-RC1`, `play-json@3.0.0-M1` |
14+
| {% endif %} |
1215
| yarn | `npm` | `alpha`, `beta`, `canary`, `dev`, `experimental`, `latest`, `legacy`, `next`, `nightly`, `rc`, `release`, `stable` | `lodash@1.2.0-alpha`, `axios@latest`, `moment@nightly` |

data/reusables/dependabot/supported-package-managers.md

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,9 @@ pipenv | `pip` | 2024.4.1 | {% octicon "check" aria-label="
5151
| {% ifversion dependabot-rust-toolchain-support %} |
5252
[Rust toolchain](#rust-toolchain) | `rust-toolchain` | Not applicable | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable | Not applicable |
5353
| {% endif %} |
54+
| {% ifversion dependabot-sbt-support %} |
55+
[sbt](#sbt) | `sbt` | Not applicable | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} |
56+
| {% endif %} |
5457
[Swift](#swift) | `swift` | v5 | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} (git only) | {% octicon "x" aria-label="Not supported" %} |
5558
[Terraform](#terraform) | `terraform` | >= 0.13, <= 1.13.x | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable |
5659
| {% ifversion dependabot-uv-security-support %} |
@@ -226,6 +229,22 @@ Supported update patterns {% data variables.product.prodname_dependabot %} can u
226229

227230
{% endif %}
228231

232+
{% ifversion dependabot-sbt-support %}
233+
234+
### sbt
235+
236+
{% data variables.product.prodname_dependabot %} supports updates to sbt dependency files. sbt resolves artifacts from Maven repositories and uses the same version ordering as Maven.
237+
238+
The following manifest files are supported:
239+
240+
* `build.sbt` (root): fetched as a required file.
241+
* `project/plugins.sbt`: fetched if present.
242+
* `project/build.properties`: fetched if present.
243+
* `project/*.scala`: all `.scala` files in the `project/` directory.
244+
* `{subdir}/build.sbt`: scans root-level subdirectories (excluding `project/`, `target/`, `.git`, `.github`).
245+
246+
{% endif %}
247+
229248
### Swift
230249

231250
Private registry support applies to git registries only. Swift registries are not supported. Non-declarative manifests are not supported. For more information on non-declarative manifests, see [Editing Non-Declarative Manifests](https://github.com/apple/swift-evolution/blob/7003da1439ad60896ec14657dfce829f04b0632c/proposals/0301-package-editing-commands.md#editing-non-declarative-manifests) in the Swift Evolution documentation.

0 commit comments

Comments
 (0)