Skip to content

Fix unterminated string in Dependabot update-types example - #45906

Merged
mchammer01 merged 2 commits into
github:mainfrom
SurefireStudios:fix-dependabot-unterminated-string
Sep 17, 2026
Merged

mchammer01 merged 2 commits into
github:mainfrom
SurefireStudios:fix-dependabot-unterminated-string

Conversation

@SurefireStudios

@SurefireStudios SurefireStudios commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Why:

Closes:

One yaml copy block in "Controlling dependencies updated by Dependabot" is missing a closing double quote, so it does not parse: - "version-update:semver-patch.

The same string is correctly quoted four other times in the same file, so this is a typo rather than house style.

The block has a copy button, so readers copy a dependabot.yml that Dependabot rejects with a parse error.

What's being changed (if available, include any code snippets, screenshots, or gifs):

Added the missing " — one character, in Allowing specific semantic versioning levels for updates.

The example now parses and matches the sentence below it:

production  -> ['version-update:semver-patch']
development -> ['version-update:semver-minor', 'version-update:semver-patch']

Check off the following:

  • A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
  • The changes in this PR meet the docs fundamentals that are required for all content.
  • All CI checks are passing and the changes look good in the review environment.

The final sequence item in the combined `update-types`/`dependency-type`
example was missing its closing double quote, so the block does not parse
as YAML. The same string appears correctly quoted four other times in this
file.

The block is tagged `yaml copy`, so the copy button offers a dependabot.yml
that Dependabot would reject.
Copilot AI balanced review requested due to automatic review settings September 15, 2026 15:24
@welcome

welcome Bot commented Sep 15, 2026

Copy link
Copy Markdown

Thanks for opening this pull request! A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@github-actions github-actions Bot added the triage Do not begin working on this issue until triaged by the team label Sep 15, 2026
@github-actions

github-actions Bot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source Review Production What Changed
code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/controlling-dependencies-updated.md fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18 3.17
fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18 3.17

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

@janiceilene

Copy link
Copy Markdown
Contributor

Thanks for opening a PR @SurefireStudios ✨ I'll get this triaged for review.

@janiceilene janiceilene added driver persona and removed triage Do not begin working on this issue until triaged by the team labels Sep 16, 2026

@mchammer01 mchammer01 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for spotting and fixing this 💖
LGTM 👍🏻

@mchammer01
mchammer01 added this pull request to the merge queue Sep 17, 2026
Merged via the queue into github:main with commit bd35840 Sep 17, 2026
43 checks passed
@github-actions

Copy link
Copy Markdown
Contributor

Thanks very much for contributing! Your pull request has been merged 🎉 You should see your changes appear on the site in approximately 24 hours. If you're looking for your next contribution, check out our help wanted issues

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants