Skip to content

Commit

Permalink
fix: move caution box and add base image TRG link
Browse files Browse the repository at this point in the history
  • Loading branch information
tomaszbarwicki committed Jan 16, 2024
1 parent a8fa427 commit cc352d9
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions docs/release/trg-0/trg-2-6.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ Key Benefits:

Dependabot is an excellent fit for application dependencies/vulnerabilities. By regularly checking for updates, it allows you to seamlessly integrate the latest improvements into your application.

For Docker images, Dependabot ensures that your base images and dependencies are regularly updated, reducing the risk of using outdated or vulnerable components.
For Docker images, Dependabot ensures that your [base images](https://eclipse-tractusx.github.io/docs/release/trg-4/trg-4-02) and dependencies are regularly updated, reducing the risk of using outdated or vulnerable components.

Dependabot can also assist in keeping used GitHub Actions up to date. This is crucial for ensuring that your workflows leverage the latest GitHub Actions features and improvements.

Expand All @@ -38,6 +38,11 @@ To enable Dependabot for version updates, create a dependabot.yml file in .githu

This configuration checks for Maven, GitHub Action and Docker updates on a weekly basis and creates pull requests for up to 5 updates at a time.

:::caution
Be careful, Dependabot PR merge can lead to out of date DEPENDENCIES file.
Make sure DEPENDENCIES file is updated by DASH tool.
:::

```yaml
version: 2
updates:
Expand Down Expand Up @@ -67,11 +72,6 @@ More information:
<https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates>
<https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file>
:::caution
Be careful, Dependabot PR merge can lead to out of date DEPENDENCIES file.
Make sure DEPENDENCIES file is updated by DASH tool.
:::
:::info
Importance of Implemented Tests:
Expand Down

0 comments on commit cc352d9

Please sign in to comment.