Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -886,7 +886,7 @@ Prevents a job from failing when a step fails. Set to `true` to allow a job to p

## `jobs.<job_id>.steps[*].timeout-minutes`

The maximum number of minutes to run the step before killing the process.
The maximum number of minutes to run the step before killing the process. Maximum: 360 for both {% data variables.product.github %}-hosted and self-hosted runners.

Fractional values are not supported. `timeout-minutes` must be a positive integer.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -165,6 +165,7 @@ Examples of how to configure access to the private registries supported by {% da
* [`composer-repository`](#composer-repository)
* [`docker-registry`](#docker-registry)
* [`git`](#git)
* [`goproxy-server`](#goproxy-server)
* [`hex-organization`](#hex-organization)
* [`hex-repository`](#hex-repository)
* [`maven-repository`](#maven-repository)
Expand Down Expand Up @@ -257,6 +258,25 @@ registries:

{% endraw %}

### `goproxy-server`

The `goproxy-server` type supports username and password. {% data reusables.dependabot.password-definition %}

{% data reusables.dependabot.dependabot-updates-path-match %}

{% raw %}

```yaml copy
registries:
my-private-registry:
type: goproxy-server
url: https://acme.jfrog.io/artifactory/api/go/my-repo
username: octocat
password: ${{secrets.MY_GO_REGISTRY_TOKEN}}
```

{% endraw %}

{% ifversion dependabot-helm-support %}

### `helm-registry`
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,7 @@ You'll find detailed guidance for the setup of the following package managers:
* [Cargo](#cargo)
* [Docker](#docker){% ifversion dependabot-docker-compose-support %}
* [Docker Compose](#docker-compose){% endif %}
* [Go](#go)
* [Gradle](#gradle){% ifversion dependabot-helm-support %}
* [Helm Charts](#helm-charts){% endif %}
* [Maven](#maven)
Expand Down Expand Up @@ -238,6 +239,41 @@ updates:

{% data reusables.dependabot.dependency-submission-api-build-time-dependencies %}

### Go

Supported by Jfrog Artifactory and Nexus.

Go supports using a username and password for private registries.

Configure your private registry using the `dependabot.yml` file with the `goproxy-server` type:

{% raw %}

```yaml copy
registries:
my-private-registry:
type: goproxy-server
url: https://acme.jfrog.io/artifactory/api/go/my-repo
username: octocat
password: ${{secrets.MY_GO_REGISTRY_TOKEN}}
```

{% endraw %}

You can also optionally configure how the Go toolchain accesses your proxy server by creating a `go.env` file in your repository root. This file allows you to set environment variables like `GOPROXY`, `GOPRIVATE`, `GONOSUMDB`, and `GOSUMDB` to control how Go modules are resolved:

```text copy
GOPROXY=https://acme.jfrog.io/artifactory/api/go/my-repo
GOPRIVATE=my-company.com/*
GONOSUMDB=my-company.com/*
```

#### Notes

{% data reusables.dependabot.access-private-dependencies-link %}

This feature enables unified dependency management for both public and private Go modules within a single {% data variables.product.prodname_dependabot %} workflow, making it ideal for organizations using corporate artifact management systems like JFrog Artifactory or Nexus.

### Maven

Maven supports username and password authentication. For more information, see `maven-repository` in [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#maven-repository).
Expand Down
8 changes: 7 additions & 1 deletion content/copilot/concepts/agents/code-review.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,12 +40,18 @@ If you receive {% data variables.product.prodname_copilot_short %} from an organ

## Code review monthly quota

When you assign {% data variables.product.prodname_copilot_short %} as a reviewer for a pull requestor when you request {% data variables.product.prodname_copilot_short %} to review all of your uncommitted changes in your IDE—your monthly quota of Copilot premium requests is reduced by one. For information about premium requests, see [AUTOTITLE](/copilot/managing-copilot/monitoring-usage-and-entitlements/about-premium-requests).
Each time {% data variables.product.prodname_copilot_short %} reviews a pull request, or reviews files in your IDE that contain changes, your monthly quota of Copilot premium requests is reduced by one. Code review for currently selected text in {% data variables.product.prodname_vscode_shortname %} does not consume a premium request. For information about premium requests, see [AUTOTITLE](/copilot/managing-copilot/monitoring-usage-and-entitlements/about-premium-requests).

If a repository is configured to automatically request a code review from {% data variables.product.prodname_copilot_short %} for all new pull requests, the premium request usage is applied to the quota of the pull request author. If a pull request is created by {% data variables.product.prodname_actions %} or by a bot, the usage will apply to the user who triggered the workflow (if identifiable), or to a designated billing owner.

When you reach your monthly quota you will not be able to get a code review from {% data variables.product.prodname_copilot_short %} until your quota resets—unless you upgrade your {% data variables.product.prodname_copilot_short %} plan or enable additional premium requests.

## Model usage

{% data reusables.copilot.ccr-model-usage %}

{% data reusables.copilot.ccr-model-settings %}

## {% data variables.copilot.copilot_code-review_short %} in {% data variables.product.prodname_vscode %}

{% data variables.copilot.copilot_code-review_short %} in {% data variables.product.prodname_vscode %} supports two types of review:
Expand Down
10 changes: 6 additions & 4 deletions content/copilot/responsible-use/code-review.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,12 @@ The response generated by {% data variables.product.prodname_copilot_short %} is

Where {% data variables.product.prodname_copilot_short %} has provided a code suggestion, the suggestion is presented as a suggested change, which can be applied with a couple of clicks.

### Model usage

{% data reusables.copilot.ccr-model-usage %} Each use of this feature consumes one premium request. See [AUTOTITLE](/copilot/managing-copilot/monitoring-usage-and-entitlements/about-premium-requests).

{% data reusables.copilot.ccr-model-settings %}

## Use case for {% data variables.copilot.copilot_code-review %}

The goal of {% data variables.copilot.copilot_code-review %} is to quickly provide feedback on a developer’s code. This can enable developers to get code ready to merge more quickly and increase overall code quality.
Expand All @@ -69,10 +75,6 @@ You can configure custom instructions to help {% data variables.product.prodname

Depending on factors such as your codebase and programming language, you may encounter different levels of performance when using {% data variables.copilot.copilot_code-review %}. The following information is designed to help you understand system limitations and key concepts about performance as they apply to {% data variables.copilot.copilot_code-review %}.

### Limited scope

{% data variables.copilot.copilot_code-review_short %} only supports a specific set of programming languages, and it is only designed to identify a limited, fixed set of code quality issues. To ensure that all relevant problems are identified and corrected, {% data variables.copilot.copilot_code-review_short %} should be supplemented with careful human code review.

### Missed code quality problems

{% data variables.product.prodname_copilot_short %} may not identify all of the problems that are present in code, especially where changes are large or complex. To ensure that all relevant problems are identified and corrected, {% data variables.copilot.copilot_code-review_short %} should be supplemented with careful human code review.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,6 @@ The membership information report includes the following information.
* Whether the user has two-factor authentication enabled
* Whether the membership is public or private
* Whether the user is an organization owner or member
* Datetime of the user's last activity (such as timeline events, session updates, or access to resources via a {% data variables.product.pat_generic %} or SSH key)
{%- ifversion ghec %}
* Optionally, additional information that depends on the organization's configuration:
* The user's SAML `NameID`
Expand Down
2 changes: 2 additions & 0 deletions data/reusables/copilot/ccr-model-settings.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
> [!NOTE]
> {% data variables.copilot.copilot_code-review_short %} may use models that are not enabled on your organization's "Models" settings page. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/manage-policies).
1 change: 1 addition & 0 deletions data/reusables/copilot/ccr-model-usage.md
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{% data variables.copilot.copilot_code-review_short %} is a purpose-built product that uses a carefully tuned mix of models, prompts, and system behaviors to deliver consistent, high-quality feedback across a wide range of codebases. Model switching is not supported, as changing the model is likely to compromise reliability, user experience, and the quality of review comments.
2 changes: 1 addition & 1 deletion src/github-apps/lib/config.json
Original file line number Diff line number Diff line change
Expand Up @@ -60,5 +60,5 @@
"2022-11-28"
]
},
"sha": "e605333115d5123d2ac50baf757e65cbb94a60c3"
"sha": "b31dcc1c69b88654b6fa48764c837c0a6ccd0d28"
}
Loading
Loading