Skip to content

Fix unterminated string in Dependabot update-types example - #45906

Open
SurefireStudios wants to merge 1 commit into
github:mainfrom
SurefireStudios:fix-dependabot-unterminated-string
Open

SurefireStudios wants to merge 1 commit into
github:mainfrom
SurefireStudios:fix-dependabot-unterminated-string

Conversation

@SurefireStudios

Copy link
Copy Markdown
Contributor

Why:

Closes:

No existing issue — this is a technical correction found by parsing every fenced yaml block in content/.

One yaml copy block in "Controlling dependencies updated by Dependabot" does not parse as YAML. The last sequence item is missing its closing double quote:

- "version-update:semver-patch

This is a typo rather than a house style: the same string appears correctly quoted as "version-update:semver-patch" four other times in this same file.

Because the block is tagged yaml copy, the site renders a copy button on a dependabot.yml that Dependabot would reject with a parse error.

What's being changed (if available, include any code snippets, screenshots, or gifs):

Added the missing closing " — a one character change in Allowing specific semantic versioning levels for updates.

With the quote restored, the example parses and the result matches the sentence directly below it ("production dependencies will only receive patch updates, while development dependencies will receive both minor and patch updates"):

production  -> ['version-update:semver-patch']
development -> ['version-update:semver-minor', 'version-update:semver-patch']

No prose or behavior changes.

Check off the following:

  • A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
  • The changes in this PR meet the docs fundamentals that are required for all content.
  • All CI checks are passing and the changes look good in the review environment.

The final sequence item in the combined `update-types`/`dependency-type`
example was missing its closing double quote, so the block does not parse
as YAML. The same string appears correctly quoted four other times in this
file.

The block is tagged `yaml copy`, so the copy button offers a dependabot.yml
that Dependabot would reject.
Copilot AI balanced review requested due to automatic review settings September 15, 2026 15:24
@welcome

welcome Bot commented Sep 15, 2026

Copy link
Copy Markdown

Thanks for opening this pull request! A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@github-actions github-actions Bot added the triage Do not begin working on this issue until triaged by the team label Sep 15, 2026
@github-actions

Copy link
Copy Markdown
Contributor

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source Review Production What Changed
code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/controlling-dependencies-updated.md fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18 3.17
fpt
ghec
ghes@ 3.22 3.21 3.20 3.19 3.18 3.17

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

triage Do not begin working on this issue until triaged by the team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants