зеркало из https://github.com/github/docs.git
Merge branch 'main' into style-consistency
This commit is contained in:
Matt Pollard
GitHub
Коммит
591c380975
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 14 KiB После Ширина: | Высота: | Размер: 74 KiB |
Двоичные данные
assets/images/help/enterprises/enterprise-filter-pending-invitations.png
Normal file
Двоичные данные
assets/images/help/enterprises/enterprise-filter-pending-invitations.png
Normal file
Двоичный файл не отображается.
|
После Ширина: | Высота: | Размер: 119 KiB |
Двоичные данные
assets/images/help/enterprises/pending-invitations-tab.png
Двоичные данные
assets/images/help/enterprises/pending-invitations-tab.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 7.5 KiB |
Двоичные данные
assets/images/help/enterprises/pending-invitations-type-tabs.png
Двоичные данные
assets/images/help/enterprises/pending-invitations-type-tabs.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 12 KiB |
Двоичные данные
assets/images/help/notifications-v2/all-subscriptions.png
Двоичные данные
assets/images/help/notifications-v2/all-subscriptions.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 70 KiB После Ширина: | Высота: | Размер: 148 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 15 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 29 KiB После Ширина: | Высота: | Размер: 63 KiB |
Двоичные данные
assets/images/help/notifications-v2/custom-filter-example.png
Двоичные данные
assets/images/help/notifications-v2/custom-filter-example.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 52 KiB После Ширина: | Высота: | Размер: 140 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 68 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 16 KiB После Ширина: | Высота: | Размер: 79 KiB |
Двоичные данные
assets/images/help/notifications-v2/default-filters.png
Двоичные данные
assets/images/help/notifications-v2/default-filters.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 61 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 14 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 19 KiB После Ширина: | Высота: | Размер: 41 KiB |
Двоичные данные
assets/images/help/notifications-v2/inbox-view.png
Двоичные данные
assets/images/help/notifications-v2/inbox-view.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 143 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 20 KiB После Ширина: | Высота: | Размер: 55 KiB |
Двоичные данные
assets/images/help/notifications-v2/mobile-watch-button.png
Двоичные данные
assets/images/help/notifications-v2/mobile-watch-button.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 88 KiB |
Двоичные данные
assets/images/help/notifications-v2/mobile-watch-settings.png
Двоичные данные
assets/images/help/notifications-v2/mobile-watch-settings.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 71 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 29 KiB После Ширина: | Высота: | Размер: 77 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 15 KiB |
Двоичные данные
assets/images/help/notifications-v2/review-requested-reason.png
Двоичные данные
assets/images/help/notifications-v2/review-requested-reason.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 43 KiB |
Двоичные данные
assets/images/help/notifications-v2/save-triaging-option.png
Двоичные данные
assets/images/help/notifications-v2/save-triaging-option.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 21 KiB После Ширина: | Высота: | Размер: 46 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 39 KiB После Ширина: | Высота: | Размер: 44 KiB |
Двоичные данные
assets/images/help/notifications-v2/unread-inbox-view.png
Двоичные данные
assets/images/help/notifications-v2/unread-inbox-view.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 18 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 132 KiB После Ширина: | Высота: | Размер: 126 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 7.8 KiB После Ширина: | Высота: | Размер: 77 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 48 KiB |
Двоичные данные
assets/images/help/notifications-v2/unwatch-repo-dialog.png
Двоичные данные
assets/images/help/notifications-v2/unwatch-repo-dialog.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 13 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 22 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 22 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 11 KiB |
Двоичные данные
assets/images/help/organizations/edit-invitation-button.png
Двоичные данные
assets/images/help/organizations/edit-invitation-button.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 14 KiB |
Двоичный файл не отображается.
|
После Ширина: | Высота: | Размер: 176 KiB |
Двоичные данные
assets/images/help/organizations/organization-edit-or-cancel-invitation.png
Normal file
Двоичные данные
assets/images/help/organizations/organization-edit-or-cancel-invitation.png
Normal file
Двоичный файл не отображается.
|
После Ширина: | Высота: | Размер: 78 KiB |
Двоичный файл не отображается.
|
После Ширина: | Высота: | Размер: 75 KiB |
Двоичные данные
assets/images/help/organizations/pending-invitation-link.png
Двоичные данные
assets/images/help/organizations/pending-invitation-link.png
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 26 KiB |
Двоичный файл не отображается.
|
До Ширина: | Высота: | Размер: 44 KiB |
|
|
@ -46,25 +46,26 @@ When you unsubscribe from notifications in your inbox, they will automatically d
|
|||
{% data reusables.notifications.access_notifications %}
|
||||
1. From the notifications inbox, select the notifications you want to unsubscribe to.
|
||||
2. Click **Unsubscribe.**
|
||||
|
||||
|
||||
|
||||
|
||||
## Unsubscribing from notifications on the subscriptions page
|
||||
|
||||
{% data reusables.notifications.access_notifications %}
|
||||
1. In the left sidebar, under the list of repositories, use the "Manage notifications" drop-down to click **Subscriptions**.
|
||||
|
||||
1. In the left sidebar, under the list of repositories, select the "Manage notifications" dropdown menu and click **Subscriptions**.
|
||||
|
||||
2. Select the notifications you want to unsubscribe to. In the top right, click **Unsubscribe.**
|
||||
|
||||
|
||||
|
||||
2. Select the notifications you want to unsubscribe from. In the top right, click **Unsubscribe**.
|
||||
|
||||
## Unwatching repositories
|
||||
|
||||
When you unwatch a repository, you unsubscribe from future updates from that repository unless you participate in a conversation or are @mentioned.
|
||||
|
||||
{% data reusables.notifications.access_notifications %}
|
||||
1. In the left sidebar, under the list of repositories, use the "Manage notifications" drop-down to click **Watched repositories**.
|
||||
1. In the left sidebar, under the list of repositories, select the "Manage notifications" dropdown menu and click **Watched repositories**.
|
||||
|
||||
|
||||
|
||||
|
||||
2. On the watched repositories page, after you've evaluated the repositories you're watching, choose whether to:
|
||||
|
||||
|
|
@ -74,8 +75,6 @@ When you unwatch a repository, you unsubscribe from future updates from that rep
|
|||
|
||||
1. Optionally, to unsubscribe from all repositories owned by a given user or organization, select the **Unwatch all** dropdown and click the organization whose repositories you'd like to unsubscribe from. The button to unwatch all repositories is only available if you are watching all activity or custom notifications on over 10 repositories.
|
||||
|
||||
|
||||
|
||||
|
||||
- Click **Unwatch** to confirm that you want to unwatch the repositories owned by the selected user or organization, or click **Cancel** to cancel.
|
||||
|
||||
|
||||
|
|
|
|||
|
|
@ -31,14 +31,7 @@ We recommend auditing and unsubscribing from your subscriptions as a part of a h
|
|||
|
||||
## Diagnosing why you receive too many notifications
|
||||
|
||||
When your inbox has too many notifications to manage, consider whether you have oversubscribed or how you can change your notification settings to reduce the subscriptions you have and the types of notifications you're receiving. For example, you may consider disabling the settings to automatically watch all repositories and all team discussions whenever you've joined a team or repository.
|
||||
|
||||
{% ifversion update-notification-settings-22 %}
|
||||
|
||||
{% else %}
|
||||
{% endif %}
|
||||
|
||||
For more information, see "[AUTOTITLE](/account-and-profile/managing-subscriptions-and-notifications-on-github/setting-up-notifications/configuring-notifications#automatic-watching)."
|
||||
When your inbox has too many notifications to manage, consider whether you have oversubscribed or how you can change your notification settings to reduce the subscriptions you have and the types of notifications you're receiving. For example, you may consider disabling the settings to automatically watch all repositories and all team discussions whenever you've joined a team or repository. For more information, see "[AUTOTITLE](/account-and-profile/managing-subscriptions-and-notifications-on-github/setting-up-notifications/configuring-notifications#automatic-watching)."
|
||||
|
||||
To see an overview of your repository subscriptions, see "[Reviewing repositories that you're watching](#reviewing-repositories-that-youre-watching)."
|
||||
{% tip %}
|
||||
|
|
@ -53,11 +46,11 @@ Many people forget about repositories that they've chosen to watch in the past.
|
|||
|
||||
{% data reusables.notifications.access_notifications %}
|
||||
1. In the left sidebar, under the list of repositories that you have notifications from, use the "Manage notifications" drop-down to click **Subscriptions**.
|
||||
|
||||
|
||||
|
||||
2. Use the filters and sort to narrow the list of subscriptions and begin unsubscribing to conversations you no longer want to receive notifications for.
|
||||
|
||||
|
||||
|
||||
|
||||
{% tip %}
|
||||
|
||||
|
|
@ -71,9 +64,8 @@ Many people forget about repositories that they've chosen to watch in the past.
|
|||
## Reviewing repositories that you're watching
|
||||
|
||||
1. In the left sidebar, under the list of repositories, use the "Manage notifications" drop-down menu and click **Watched repositories**.
|
||||
|
||||
|
||||
2. Evaluate the repositories that you are watching and decide if their updates are still relevant and helpful. When you watch a repository, you will be notified of all conversations for that repository.
|
||||
|
||||
|
||||
{% tip %}
|
||||
|
||||
|
|
|
|||
|
|
@ -25,7 +25,7 @@ You can choose to receive ongoing updates about specific activity on {% data var
|
|||
You can choose to subscribe to notifications for:
|
||||
- A conversation in a specific issue, pull request, or gist.
|
||||
- All activity in a repository or team discussion.
|
||||
- CI activity, such as the status of workflows in repositories set up with {% data variables.product.prodname_actions %}.
|
||||
- CI activity, such as the status of workflows in repositories set up with {% data variables.product.prodname_actions %}.
|
||||
- Repository {% data reusables.notifications-v2.custom-notification-types %} (if enabled).
|
||||
|
||||
You can also choose to automatically watch all repositories that you have push access to, except forks. You can watch any other repository you have access to manually by clicking **Watch**.
|
||||
|
|
@ -66,13 +66,9 @@ You can customize and schedule push notifications in the {% data variables.produ
|
|||
|
||||
Your inbox is configured with default filters, which represent the most common reasons that people need to follow-up on their notifications. For more information about inbox filters, see "[AUTOTITLE](/account-and-profile/managing-subscriptions-and-notifications-on-github/viewing-and-triaging-notifications/managing-notifications-from-your-inbox#default-notification-filters)."
|
||||
|
||||
Your inbox shows the `reasons` you're receiving notifications as a label.
|
||||
Your inbox shows the `reason` you're receiving a notification as a label, such as, `mention`, `subscribed`, or `review requested`.
|
||||
|
||||
|
||||
|
||||
You can filter your inbox by the reason you're subscribed to notifications. For example, to only see pull requests where someone requested your review, you can use the `review-requested` query filter.
|
||||
|
||||
|
||||
You can filter your inbox by the reason you're subscribed to notifications. For example, to only see pull requests where someone requested your review, you can use the `reason:review-requested` query filter.
|
||||
|
||||
If you've configured notifications to be sent by email and believe you're receiving notifications that don't belong to you, consider troubleshooting with email headers, which show the intended recipient. For more information, see "[AUTOTITLE](/account-and-profile/managing-subscriptions-and-notifications-on-github/setting-up-notifications/configuring-notifications#filtering-email-notifications)."
|
||||
|
||||
|
|
|
|||
|
|
@ -79,19 +79,19 @@ You can customize notifications for a repository. For example, you can choose to
|
|||
### Participating in conversations
|
||||
Anytime you comment in a conversation or when someone @mentions your username, you are participating in a conversation. By default, you are automatically subscribed to a conversation when you participate in it. You can unsubscribe from a conversation you've participated in manually by clicking **Unsubscribe** on the issue or pull request or through the **Unsubscribe** option in the notifications inbox.
|
||||
|
||||
{% ifversion update-notification-settings-22 %}For conversations you're watching or participating in, you can choose whether you want to receive notifications on {% data variables.product.company_short %} or by email in your notification settings. For more information, see "[AUTOTITLE](/account-and-profile/managing-subscriptions-and-notifications-on-github/setting-up-notifications/configuring-notifications#choosing-your-notification-settings)."
|
||||
{% ifversion update-notification-settings-22 %}For conversations you're watching or participating in, you can choose whether you want to receive notifications on {% data variables.product.company_short %} or by email in your notification settings. For more information, see "[Choosing your notification settings](/account-and-profile/managing-subscriptions-and-notifications-on-github/setting-up-notifications/configuring-notifications#choosing-your-notification-settings)."
|
||||
|
||||
|
||||
|
||||
{% else %}
|
||||
|
||||
For conversations you're watching or participating in, you can choose whether you want to receive notifications by email or through the notifications inbox on {% data variables.location.product_location %}{% ifversion ghes %} and {% data variables.product.prodname_mobile %}{% endif %}. For more information, see "[AUTOTITLE](/account-and-profile/managing-subscriptions-and-notifications-on-github/setting-up-notifications/configuring-notifications#choosing-your-notification-settings)."
|
||||
For conversations you're watching or participating in, you can choose whether you want to receive notifications by email or through the notifications inbox on {% data variables.location.product_location %}{% ifversion ghes %} and {% data variables.product.prodname_mobile %}{% endif %}. For more information, see "[Choosing your notification settings](/account-and-profile/managing-subscriptions-and-notifications-on-github/setting-up-notifications/configuring-notifications#choosing-your-notification-settings)."
|
||||
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
|
||||
For example:
|
||||
- If you don't want notifications to be sent to your email, unselect **email** for participating and watching notifications.
|
||||
- If you want to receive notifications by email when you've participated in a conversation, then you can select **email** under "Participating".
|
||||
For example, on your "Notification settings" page:
|
||||
- If you don't want notifications to be sent to your email, deselect **email** for participating and watching notifications.
|
||||
- If you want to receive notifications by email when you've participated in a conversation, then select **email** under "Participating".
|
||||
|
||||
{% ifversion update-notification-settings-22 %}If you do not enable "Notify me: On GitHub" for watching or participating notifications, then your notifications inbox will not have any updates.
|
||||
|
||||
|
|
@ -161,7 +161,7 @@ By default, anytime you gain access to a new repository, you will automatically
|
|||
{% ifversion update-notification-settings-22 %}
|
||||
|
||||
{% else %}
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
|
||||
If "Automatically watch repositories" is disabled, then you will not automatically watch your own repositories. You must navigate to your repository page and choose the watch option.
|
||||
|
||||
|
|
@ -172,12 +172,11 @@ For more information, see "[AUTOTITLE](/account-and-profile/managing-subscriptio
|
|||
You can choose whether to watch or unwatch an individual repository. You can also choose to only be notified of certain event types such as {% data reusables.notifications-v2.custom-notification-types %} (if enabled for the repository) , or completely ignore an individual repository.
|
||||
|
||||
{% data reusables.repositories.navigate-to-repo %}
|
||||
2. In the upper-right corner, select the "Watch" drop-down menu to click a watch option.
|
||||
|
||||
1. In the upper-right corner, select the "Watch" drop-down menu, then click a watch option.
|
||||
|
||||
The **Custom** option allows you to further customize notifications so that you're only notified when specific events happen in the repository, in addition to participating and @mentions.
|
||||
|
||||
If you select "Issues", you will be notified about, and subscribed to, updates on every issue (including those that existed prior to you selecting this option) in the repository. If you're @mentioned in a pull request in this repository, you'll receive notifications for that too, and you'll be subscribed to updates on that specific pull request, in addition to being notified about issues.
|
||||
If you want to further customize notifications, click **Custom**, then select specific events that you want to be notified of, such as Issues or Pull Requests, in addition to participating and @mentions.
|
||||
|
||||
For example, if you select "Issues", you will be notified about, and subscribed to, updates on every issue (including those that existed prior to you selecting this option) in the repository. If you're @mentioned in a pull request in this repository, you'll receive notifications for that too, and you'll be subscribed to updates on that specific pull request, in addition to being notified about issues.
|
||||
|
||||
## Choosing where your organization’s email notifications are sent
|
||||
|
||||
|
|
@ -248,13 +247,13 @@ For more information about the notification delivery methods available to you, a
|
|||
{% ifversion update-notification-settings-22 or ghes %}
|
||||
## {% data variables.product.prodname_actions %} notification options
|
||||
|
||||
Choose how you want to receive workflow run updates for repositories that you are watching that are set up with {% data variables.product.prodname_actions %}. You can also choose to only receive notifications for failed workflow runs.{% endif %}
|
||||
For repositories that are set up with {% data variables.product.prodname_actions %} and that you are watching, you can choose how you want to receive workflow run updates via the "Notification settings" page. You can choose to receive {% ifversion ghes %}email or web notifications{% endif %}{% ifversion update-notification-settings-22 %} notifications by email or on {% data variables.product.prodname_dotcom %}{% endif %}, and to only receive notifications for failed workflow runs.{% endif %}
|
||||
|
||||
{% ifversion update-notification-settings-22 %}
|
||||
{% endif %}
|
||||
|
||||
{% ifversion ghes %}
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
|
||||
## Organization alerts notification options
|
||||
|
||||
|
|
@ -292,9 +291,7 @@ You can also schedule when {% data variables.product.prodname_mobile %} will sen
|
|||
You can choose whether to watch or unwatch an individual repository. You can also choose to only be notified of {% ifversion fpt or ghec %}certain event types such as issues, pull requests, discussions (if enabled for the repository) and {% endif %}new releases, or completely ignore an individual repository.
|
||||
|
||||
1. On {% data variables.product.prodname_mobile %}, navigate to the main page of the repository.
|
||||
2. Tap **Watch**.
|
||||
|
||||
3. To choose what activities you receive notifications for, tap your preferred watch settings.
|
||||
|
||||
1. Tap **Watch**.
|
||||
1. To choose what activities you receive notifications for, tap your preferred watch settings. For example, choose to only be notified when you are participating or @mentioned, or use the "Custom" option to select specific events that you want to be notified of.
|
||||
|
||||
{% endif %}
|
||||
|
|
|
|||
|
|
@ -24,16 +24,10 @@ shortTitle: Manage from your inbox
|
|||
|
||||
To access your notifications inbox, in the upper-right corner of any page, click {% octicon "bell" aria-label="The notifications bell" %}.
|
||||
|
||||
|
||||
|
||||
Your inbox shows all of the notifications that you haven't unsubscribed to or marked as **Done.** You can customize your inbox to best suit your workflow using filters, viewing all or just unread notifications, and grouping your notifications to get a quick overview.
|
||||
|
||||
|
||||
|
||||
By default, your inbox will show read and unread notifications. To only see unread notifications, click **Unread** or use the `is:unread` query.
|
||||
|
||||
|
||||
|
||||
## Triaging options
|
||||
|
||||
You have several options for triaging notifications from your inbox.
|
||||
|
|
@ -54,14 +48,12 @@ Before choosing a triage option, you can preview your notification's details fir
|
|||
|
||||
To triage multiple notifications at once, select the relevant notifications and use the {% octicon "kebab-horizontal" aria-label="The edit icon" %} drop-down to choose a triage option.
|
||||
|
||||
|
||||
|
||||
|
||||
## Default notification filters
|
||||
|
||||
By default, your inbox has filters for when you are assigned, participating in a thread, requested to review a pull request, or when your username is @mentioned directly or a team you're a member of is @mentioned.
|
||||
|
||||
|
||||
|
||||
## Customizing your inbox with custom filters
|
||||
|
||||
You can add up to 15 of your own custom filters.
|
||||
|
|
@ -77,7 +69,7 @@ You can add up to 15 of your own custom filters.
|
|||
|
||||
3. Add a name for your filter and a filter query. For example, to only see notifications for a specific repository, you can create a filter using the query `repo:octocat/open-source-project-name reason:participating`. You can also add emojis with a native emoji keyboard. For a list of supported search queries, see "[Supported queries for custom filters](#supported-queries-for-custom-filters)."
|
||||
|
||||
|
||||
|
||||
|
||||
4. Click **Create**.
|
||||
|
||||
|
|
@ -155,7 +147,7 @@ To filter notifications by user, you can use the `author:` query. An author is t
|
|||
|
||||
To filter notifications by organization, you can use the `org` query. The organization you need to specify in the query is the organization of the repository for which you are being notified on {% data variables.product.prodname_dotcom %}. This query is useful if you belong to several organizations, and want to see notifications for a specific organization.
|
||||
|
||||
For example, to see notifications from the octo-org organization, use `org:octo-org`.
|
||||
For example, to see notifications from the octo-org organization, use `org:octo-org`.
|
||||
|
||||
{% endif %}
|
||||
|
||||
|
|
@ -173,9 +165,8 @@ For more information about {% data variables.product.prodname_dependabot %}, see
|
|||
{% ifversion ghae %}
|
||||
|
||||
If you use {% data variables.product.prodname_dependabot %} to tell you about insecure dependencies, you can use and save these custom filters to show notifications for {% data variables.product.prodname_dependabot_alerts %}:
|
||||
- `is:repository_vulnerability_alert`
|
||||
- `is:repository_vulnerability_alert`
|
||||
- `reason:security_alert`
|
||||
|
||||
For more information about {% data variables.product.prodname_dependabot %}, see "[AUTOTITLE](/code-security/dependabot/dependabot-alerts/about-dependabot-alerts)."
|
||||
{% endif %}
|
||||
|
||||
|
|
|
|||
|
|
@ -19,7 +19,7 @@ To save a single notification to review later, to the right of the notification,
|
|||
|
||||
Saved notifications are kept indefinitely and can be viewed by clicking **Saved** in the sidebar or with the `is:saved` query. If your saved notification is older than 5 months and becomes unsaved, the notification will disappear from your inbox within a day.
|
||||
|
||||
|
||||
|
||||
|
||||
## Investigating a notification
|
||||
|
||||
|
|
@ -38,10 +38,8 @@ You can choose how you want to receive future notifications for a specific issue
|
|||
|
||||
1. In the right column of the issue or pull request, next to "Notifications", click **Customize**.
|
||||
|
||||
|
||||
|
||||
|
||||
2. Select **Custom** and choose when you'd like to receive a notification update for this thread. For example, you can choose to receive an update when the pull request has been merged, closed, or reopened. You will be subscribed again if you participate in the thread, your username is @mentioned, or a team you're a member of is @mentioned.
|
||||
|
||||
|
||||
2. In the dialog box, select **Custom**, then choose when you'd like to receive a notification update for this thread. For example, you can choose to receive an update when the pull request has been merged, closed, or reopened. You will be subscribed again if you participate in the thread, your username is @mentioned, or a team you're a member of is @mentioned.
|
||||
|
||||
3. Click **Save**.
|
||||
|
|
|
|||
|
|
@ -38,7 +38,9 @@ topics:
|
|||
| Using a matrix to create different test configurations: | [`matrix`](/actions/using-jobs/using-a-matrix-for-your-jobs)|
|
||||
{% data reusables.actions.checkout-action-table-entry %}
|
||||
{% data reusables.actions.setup-node-table-entry %}
|
||||
| Caching dependencies: | [`actions/cache`](/actions/using-workflows/caching-dependencies-to-speed-up-workflows)|
|
||||
{%- ifversion actions-caching %}
|
||||
| Caching dependencies: | [`actions/cache`](/actions/advanced-guides/caching-dependencies-to-speed-up-workflows)|
|
||||
{%- endif %}
|
||||
| Running tests on the runner: | `npm test`|
|
||||
|
||||
## Example workflow
|
||||
|
|
@ -611,6 +613,7 @@ This step runs the `npm ci` shell command to install the npm software packages f
|
|||
</td>
|
||||
<td>
|
||||
|
||||
{% ifversion actions-caching %}
|
||||
This step uses the `actions/cache` action to cache the Next.js build, so that the workflow will attempt to retrieve a cache of the build, and not rebuild it from scratch every time. For more information, see "[AUTOTITLE](/actions/using-workflows/caching-dependencies-to-speed-up-workflows)."
|
||||
</td>
|
||||
</tr>
|
||||
|
|
@ -623,6 +626,7 @@ This step uses the `actions/cache` action to cache the Next.js build, so that th
|
|||
```
|
||||
</td>
|
||||
<td>
|
||||
{% endif %}
|
||||
|
||||
This step runs the build script.
|
||||
</td>
|
||||
|
|
|
|||
|
|
@ -17,7 +17,7 @@ versions:
|
|||
|
||||
## About re-running workflows and jobs
|
||||
|
||||
Re-running a workflow{% ifversion re-run-jobs %} or jobs in a workflow{% endif %} uses the same `GITHUB_SHA` (commit SHA) and `GITHUB_REF` (Git ref) of the original event that triggered the workflow run. {% ifversion actions-stable-actor-ids %}The workflow will use the privileges of the actor who initially triggered the workflow, not the privileges of the actor who initiated the re-run. {% endif %}You can re-run a workflow{% ifversion re-run-jobs %} or jobs in a workflow{% endif %} for up to 30 days after the initial run.{% ifversion re-run-jobs %} You cannot re-run jobs in a workflow once its logs have passed their retention limits. For more information, see "[AUTOTITLE](/actions/learn-github-actions/usage-limits-billing-and-administration#artifact-and-log-retention-policy)."{% endif %}{% ifversion debug-reruns %} When you re-run a workflow or jobs in a workflow, you can enable debug logging for the re-run. This will enable runner diagnostic logging and step debug logging for the re-run. For more information about debug logging, see "[AUTOTITLE](/actions/monitoring-and-troubleshooting-workflows/enabling-debug-logging)."{% endif %}
|
||||
Re-running a workflow{% ifversion re-run-jobs %} or jobs in a workflow{% endif %} uses the same `GITHUB_SHA` (commit SHA) and `GITHUB_REF` (Git ref) of the original event that triggered the workflow run. {% ifversion actions-stable-actor-ids %}The workflow will use the privileges of the actor who initially triggered the workflow, not the privileges of the actor who initiated the re-run. {% endif %}You can re-run a workflow{% ifversion re-run-jobs %} or jobs in a workflow{% endif %} for up to 30 days after the initial run.{% ifversion not ghae %}{% ifversion re-run-jobs %} You cannot re-run jobs in a workflow once its logs have passed their retention limits. For more information, see "[AUTOTITLE](/actions/learn-github-actions/usage-limits-billing-and-administration#artifact-and-log-retention-policy."{% endif %}{% endif %}{% ifversion debug-reruns %} When you re-run a workflow or jobs in a workflow, you can enable debug logging for the re-run. This will enable runner diagnostic logging and step debug logging for the re-run. For more information about debug logging, see "[AUTOTITLE](/actions/monitoring-and-troubleshooting-workflows/enabling-debug-logging)."{% endif %}
|
||||
|
||||
## Re-running all the jobs in a workflow
|
||||
|
||||
|
|
|
|||
|
|
@ -38,7 +38,9 @@ You can configure a retention period for audit log data for {% data variables.lo
|
|||
|
||||
You can enable or disable Git-related events, such as `git.clone` and `git.push`, from appearing in your audit log. For a list of the Git events are are logged, see "[AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/audit-log-events-for-your-enterprise#git-category-actions)."
|
||||
|
||||
{% ifversion ghes %}
|
||||
If you do enable Git events, due to the large number of Git events that are logged, we recommend monitoring your instance's file storage and reviewing your related alert configurations. For more information, see "[AUTOTITLE](/admin/enterprise-management/monitoring-your-appliance/recommended-alert-thresholds#monitoring-storage)."
|
||||
{% endif %}
|
||||
|
||||
Before you can enable Git events in the audit log, you must configure a retention period for audit log data other than "infinite." For more information, see "[Configuring a retention period for audit log data](#configuring-a-retention-period-for-audit-log-data)."
|
||||
|
||||
|
|
|
|||
|
|
@ -177,7 +177,7 @@ However, you can set an enterprise policy to customize both the default total ca
|
|||
1. In the "Artifact, log, and cache settings" section, under **Maximum cache size limit**, enter a value, then click **Save** to apply the setting.
|
||||
1. In the "Artifact, log, and cache settings" section, under **Default cache size limit**, enter a value, then click **Save** to apply the setting.
|
||||
|
||||
{% else %}
|
||||
{% elsif ghes < 3.8 %}
|
||||
|
||||
The policy settings for {% data variables.product.prodname_actions %} cache storage can currently only be modified using the REST API:
|
||||
|
||||
|
|
|
|||
|
|
@ -86,7 +86,7 @@ You can view more information about the person's access to your enterprise, such
|
|||
{% ifversion ghec %}
|
||||
## Viewing pending invitations
|
||||
|
||||
You can see all the pending invitations to become members, administrators, or outside collaborators in your enterprise. You can filter the list in useful ways, such as by organization. You can find a specific person by searching for their username or display name.
|
||||
You can see all the pending invitations to become members, administrators, or outside collaborators in your enterprise. You can filter the list in useful ways, such as by license, by organization, or by source. You can find a specific person by searching for their username or display name.
|
||||
|
||||
In the list of pending members, for any individual account, you can cancel all invitations to join organizations owned by your enterprise. This does not cancel any invitations for that same person to become an enterprise administrator or outside collaborator.
|
||||
|
||||
|
|
@ -100,15 +100,14 @@ If you use {% data variables.visual_studio.prodname_vss_ghe %}, the list of pend
|
|||
|
||||
{% data reusables.enterprise-accounts.access-enterprise %}
|
||||
{% data reusables.enterprise-accounts.people-tab %}
|
||||
1. Under "People", click **Pending invitations**.
|
||||
|
||||
|
||||
1. Under "People", click **Invitations**.
|
||||
1. Optionally, to cancel all invitations for an account to join organizations owned by your enterprise, to the right of the account, click {% octicon "kebab-horizontal" aria-label="The horizontal kebab icon" %}, then click **Cancel invitation**.
|
||||
|
||||
|
||||
1. Optionally, to view pending invitations for enterprise administrators or outside collaborators, under "Pending members", click **Administrators** or **Outside collaborators**.
|
||||
|
||||
1. Optionally, to view pending invitations for enterprise administrators or outside collaborators, under "Invitations", click **Administrators** or **Outside collaborators**.
|
||||
1. Optionally, to filter the list of pending invitations by license, by organization, or by source, use the dropdown menus at the top of the list.
|
||||
|
||||
|
||||
|
||||
|
||||
## Viewing suspended members in an {% data variables.enterprise.prodname_emu_enterprise %}
|
||||
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@ topics:
|
|||
## About notifications for {% data variables.product.prodname_dependabot_alerts %}
|
||||
|
||||
When {% data variables.product.prodname_dependabot %} detects vulnerable dependencies{% ifversion GH-advisory-db-supports-malware %} or malware{% endif %} in your repositories, we generate a {% data variables.product.prodname_dependabot %} alert and display it on the **Security** tab for the repository. {% data variables.product.product_name %} notifies the maintainers of affected repositories about the new alert according to their notification preferences.{% ifversion fpt or ghec %} {% data variables.product.prodname_dependabot %} is enabled by default on all public repositories, and needs to be enabled on private repositories. By default, you will receive {% data variables.product.prodname_dependabot_alerts %} by email. You can override the default overall behavior by choosing the type of notifications you want to receive, or switching notifications off altogether in the settings page for your user notifications at [https://github.com/settings/notifications](https://github.com/settings/notifications).
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
|
||||
{% ifversion fpt or ghec %}If you're an organization owner, you can enable or disable {% data variables.product.prodname_dependabot_alerts %} for all repositories in your organization with one click. You can also set whether {% data variables.product.prodname_dependabot_alerts %} will be enabled or disabled for newly-created repositories. For more information, see "[AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-new-repositories-when-they-are-added)."
|
||||
{% endif %}
|
||||
|
|
@ -48,9 +48,7 @@ You can configure notification settings for yourself or your organization from t
|
|||
|
||||
{% ifversion update-notification-settings-22 %}
|
||||
{% endif %}{% ifversion ghes > 3.7 or ghae > 3.7 %}
|
||||
{% endif %}{% ifversion ghes < 3.8 or ghae < 3.8 %}
|
||||
{% endif %}
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% note %}
|
||||
|
||||
|
|
|
|||
|
|
@ -132,8 +132,12 @@ For more information, see "[Reviewing and fixing alerts](#reviewing-and-fixing-a
|
|||
|
||||
It’s important to ensure that all of your dependencies are clean of any security weaknesses. When {% data variables.product.prodname_dependabot %} discovers vulnerabilities {% ifversion GH-advisory-db-supports-malware %}or malware{% endif %} in your dependencies, you should assess your project’s level of exposure and determine what remediation steps to take to secure your application.
|
||||
|
||||
{% ifversion fpt or ghec or ghes %}
|
||||
|
||||
If a patched version of the dependency is available, you can generate a {% data variables.product.prodname_dependabot %} pull request to update this dependency directly from a {% data variables.product.prodname_dependabot %} alert. If you have {% data variables.product.prodname_dependabot_security_updates %} enabled, the pull request may be linked in the {% data variables.product.prodname_dependabot %} alert.
|
||||
|
||||
{% endif %}
|
||||
|
||||
In cases where a patched version is not available, or you can’t update to the secure version, {% data variables.product.prodname_dependabot %} shares additional information to help you determine next steps. When you click through to view a {% data variables.product.prodname_dependabot %} alert, you can see the full details of the security advisory for the dependency including the affected functions. You can then check whether your code calls the impacted functions. This information can help you further assess your risk level, and determine workarounds or if you’re able to accept the risk represented by the security advisory.
|
||||
|
||||
{% ifversion dependabot-alerts-vulnerable-calls %}
|
||||
|
|
|
|||
|
|
@ -56,7 +56,9 @@ You can use the {% data variables.dependency-review.action_name %} in your repos
|
|||
|
||||
By default, the {% data variables.dependency-review.action_name %} check will fail if it discovers any vulnerable packages. A failed check blocks a pull request from being merged when the repository owner requires the dependency review check to pass. For more information, see "[AUTOTITLE](/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/about-protected-branches#require-status-checks-before-merging)."
|
||||
|
||||
{% ifversion fpt or ghec or ghes %}
|
||||
The action uses the Dependency Review REST API to get the diff of dependency changes between the base commit and head commit. You can use the Dependency Review API to get the diff of dependency changes, including vulnerability data, between any two commits on a repository. For more information, see "[AUTOTITLE](/rest/dependency-graph#dependency-review)."
|
||||
{% endif %}
|
||||
|
||||
{% ifversion dependency-review-action-configuration %}
|
||||
You can configure the {% data variables.dependency-review.action_name %} to better suit your needs. For example, you can specify the severity level that will make the action fail{% ifversion dependency-review-action-licenses %}, or set an allow or deny list for licenses to scan{% endif %}. For more information, see "[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review#configuring-the-dependency-review-github-action)."
|
||||
|
|
|
|||
|
|
@ -22,7 +22,9 @@ topics:
|
|||
|
||||
For more information, see "[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review)" and "[AUTOTITLE](/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-dependency-changes-in-a-pull-request)."
|
||||
|
||||
{% ifversion fpt or ghec or ghes %}
|
||||
## About configuring dependency review
|
||||
{% endif %}
|
||||
|
||||
{% ifversion fpt %}
|
||||
Dependency review is available in all public repositories in all products and cannot be disabled. Dependency review is available in private repositories owned by organizations that use GitHub Enterprise Cloud and have a license for [{% data variables.product.prodname_GH_advanced_security %}](/get-started/learning-about-github/about-github-advanced-security). For more information, see the [{% data variables.product.prodname_ghe_cloud %} documentation](/enterprise-cloud@latest/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review).
|
||||
|
|
@ -33,7 +35,7 @@ Dependency review is included in {% data variables.product.product_name %} for p
|
|||
{% data reusables.dependabot.enabling-disabling-dependency-graph-private-repo %}
|
||||
1. Scroll down the page and if "{% data variables.product.prodname_GH_advanced_security %}" is not enabled, click **Enable** next to the feature.
|
||||
|
||||
{% elsif ghes or ghae %}
|
||||
{% elsif ghes %}
|
||||
|
||||
Dependency review is available when dependency graph is enabled for {% data variables.location.product_location %} and {% data variables.product.prodname_advanced_security %} is enabled for the organization or repository.{% ifversion ghes %} For more information, see "[AUTOTITLE](/admin/code-security/managing-github-advanced-security-for-your-enterprise/enabling-github-advanced-security-for-your-enterprise)."{% endif %}
|
||||
|
||||
|
|
|
|||
|
|
@ -70,7 +70,8 @@ The Slack + {% data variables.product.prodname_dotcom %} app lets you subscribe
|
|||
|
||||
You can also open and close issues, comment on your issues and pull requests, approve deployments, and see detailed references to issues and pull requests without leaving Slack. The app will also ping you personally on Slack if you are mentioned as part of any {% data variables.product.prodname_dotcom %} notifications that you receive in your channels or personal chats.
|
||||
|
||||
The Slack + {% data variables.product.prodname_dotcom %} app is also compatible with [Slack Enterprise Grid](https://slack.com/intl/en-in/help/articles/360000281563-Manage-apps-on-Enterprise-Grid). For more information, visit the [Slack + {% data variables.product.prodname_dotcom %} app](https://github.com/marketplace/slack-github) in the marketplace.
|
||||
The Slack + {% data variables.product.prodname_dotcom %} app is also compatible with [Slack Enterprise Grid](https://slack.com/intl/en-in/help/articles/360000281563-Manage-apps-on-Enterprise-Grid). For more information, see the integration's [README](https://github.com/integrations/slack/blob/master/README.md) in the `integrations/slack` repository.
|
||||
|
||||
|
||||
### Microsoft Teams and {% data variables.product.product_name %} integration
|
||||
|
||||
|
|
@ -86,6 +87,6 @@ The {% data variables.product.prodname_dotcom %} for Teams app lets you subscrib
|
|||
|
||||
You can also open and close issues, comment on your issues and pull requests, approve deployments, and see detailed references to issues and pull requests without leaving Microsoft Teams. The app will also ping you personally on Teams if you are mentioned as part of any {% data variables.product.prodname_dotcom %} notifications that you receive in your channels or personal chats.
|
||||
|
||||
For more information, visit the [{% data variables.product.prodname_dotcom %} for Teams app](https://appsource.microsoft.com/en-us/product/office/WA200002077) in Microsoft AppSource.
|
||||
For more information, see the integration's [README](https://github.com/integrations/microsoft-teams/blob/master/Readme.md) in the `integrations/microsoft-teams` repository.
|
||||
|
||||
{% endif %}
|
||||
|
|
|
|||
|
|
@ -31,18 +31,18 @@ To add a new remote, use the `git remote add` command on the terminal, in the di
|
|||
|
||||
The `git remote add` command takes two arguments:
|
||||
* A remote name, for example, `origin`
|
||||
* A remote URL, for example, `https://{% data variables.command_line.backticks %}/user/repo.git`
|
||||
* A remote URL, for example, `https://{% data variables.command_line.backticks %}/OWNER/REPOSITORY.git`
|
||||
|
||||
For example:
|
||||
|
||||
```shell
|
||||
$ git remote add origin https://{% data variables.command_line.codeblock %}/USER/REPO.git
|
||||
$ git remote add origin https://{% data variables.command_line.codeblock %}/OWNER/REPOSITORY.git
|
||||
# Set a new remote
|
||||
|
||||
$ git remote -v
|
||||
# Verify new remote
|
||||
> origin https://{% data variables.command_line.codeblock %}/USER/REPO.git (fetch)
|
||||
> origin https://{% data variables.command_line.codeblock %}/USER/REPO.git (push)
|
||||
> origin https://{% data variables.command_line.codeblock %}/OWNER/REPOSITORY.git (fetch)
|
||||
> origin https://{% data variables.command_line.codeblock %}/OWNER/REPOSITORY.git (push)
|
||||
```
|
||||
|
||||
For more information on which URL to use, see "[AUTOTITLE](/get-started/getting-started-with-git/about-remote-repositories)."
|
||||
|
|
@ -77,11 +77,11 @@ The `git remote set-url` command takes two arguments:
|
|||
* A new URL for the remote. For example:
|
||||
* If you're updating to use HTTPS, your URL might look like:
|
||||
```shell
|
||||
https://{% data variables.command_line.backticks %}/USERNAME/REPOSITORY.git
|
||||
https://{% data variables.command_line.backticks %}/OWNER/REPOSITORY.git
|
||||
```
|
||||
* If you're updating to use SSH, your URL might look like:
|
||||
```shell
|
||||
git@{% data variables.command_line.codeblock %}:USERNAME/REPOSITORY.git
|
||||
git@{% data variables.command_line.codeblock %}:OWNER/REPOSITORY.git
|
||||
```
|
||||
|
||||
### Switching remote URLs from SSH to HTTPS
|
||||
|
|
@ -91,19 +91,19 @@ git@{% data variables.command_line.codeblock %}:USERNAME/REPOSITORY.git
|
|||
3. List your existing remotes in order to get the name of the remote you want to change.
|
||||
```shell
|
||||
$ git remote -v
|
||||
> origin git@{% data variables.command_line.codeblock %}:USERNAME/REPOSITORY.git (fetch)
|
||||
> origin git@{% data variables.command_line.codeblock %}:USERNAME/REPOSITORY.git (push)
|
||||
> origin git@{% data variables.command_line.codeblock %}:OWNER/REPOSITORY.git (fetch)
|
||||
> origin git@{% data variables.command_line.codeblock %}:OWNER/REPOSITORY.git (push)
|
||||
```
|
||||
4. Change your remote's URL from SSH to HTTPS with the `git remote set-url` command.
|
||||
```shell
|
||||
$ git remote set-url origin https://{% data variables.command_line.codeblock %}/USERNAME/REPOSITORY.git
|
||||
$ git remote set-url origin https://{% data variables.command_line.codeblock %}/OWNER/REPOSITORY.git
|
||||
```
|
||||
5. Verify that the remote URL has changed.
|
||||
```shell
|
||||
$ git remote -v
|
||||
# Verify new remote URL
|
||||
> origin https://{% data variables.command_line.codeblock %}/USERNAME/REPOSITORY.git (fetch)
|
||||
> origin https://{% data variables.command_line.codeblock %}/USERNAME/REPOSITORY.git (push)
|
||||
> origin https://{% data variables.command_line.codeblock %}/OWNER/REPOSITORY.git (fetch)
|
||||
> origin https://{% data variables.command_line.codeblock %}/OWNER/REPOSITORY.git (push)
|
||||
```
|
||||
|
||||
The next time you `git fetch`, `git pull`, or `git push` to the remote repository, you'll be asked for your GitHub username and password. {% data reusables.user-settings.password-authentication-deprecation %}
|
||||
|
|
@ -117,19 +117,19 @@ You can [use a credential helper](/get-started/getting-started-with-git/caching-
|
|||
3. List your existing remotes in order to get the name of the remote you want to change.
|
||||
```shell
|
||||
$ git remote -v
|
||||
> origin https://{% data variables.command_line.codeblock %}/USERNAME/REPOSITORY.git (fetch)
|
||||
> origin https://{% data variables.command_line.codeblock %}/USERNAME/REPOSITORY.git (push)
|
||||
> origin https://{% data variables.command_line.codeblock %}/OWNER/REPOSITORY.git (fetch)
|
||||
> origin https://{% data variables.command_line.codeblock %}/OWNER/REPOSITORY.git (push)
|
||||
```
|
||||
4. Change your remote's URL from HTTPS to SSH with the `git remote set-url` command.
|
||||
```shell
|
||||
$ git remote set-url origin git@{% data variables.command_line.codeblock %}:USERNAME/REPOSITORY.git
|
||||
$ git remote set-url origin git@{% data variables.command_line.codeblock %}:OWNER/REPOSITORY.git
|
||||
```
|
||||
5. Verify that the remote URL has changed.
|
||||
```shell
|
||||
$ git remote -v
|
||||
# Verify new remote URL
|
||||
> origin git@{% data variables.command_line.codeblock %}: USERNAME/REPOSITORY.git (fetch)
|
||||
> origin git@{% data variables.command_line.codeblock %}: USERNAME/REPOSITORY.git (push)
|
||||
> origin git@{% data variables.command_line.codeblock %}: OWNER/REPOSITORY.git (fetch)
|
||||
> origin git@{% data variables.command_line.codeblock %}: OWNER/REPOSITORY.git (push)
|
||||
```
|
||||
|
||||
### Troubleshooting: No such remote '[name]'
|
||||
|
|
|
|||
|
|
@ -16,21 +16,18 @@ shortTitle: Cancel or edit invitation
|
|||
{% data reusables.profile.access_org %}
|
||||
{% data reusables.user-settings.access_org %}
|
||||
{% data reusables.organizations.people %}
|
||||
1. On the People tab, click **Pending invitation**.
|
||||
1. Under "Organization permissions", click **Invitations**.
|
||||
1. Next to the username of the person whose invitation you'd like to edit or cancel, click {% octicon "kebab-horizontal" aria-label="The horizontal kebab icon" %}, then click **Edit invitation**, or click **Cancel invitation**.
|
||||
|
||||
|
||||
|
||||
|
||||
1. Next to the username or email address of the person whose invitation you'd like to edit or cancel, click **Edit invitation**.
|
||||
1. To edit the invitation, in the dialog box, select a different role or team for the account, then click **Update invitation**.
|
||||
|
||||
|
||||
|
||||
|
||||
You may need to click **View all invitations** at the bottom of the window to find the person you're looking for.
|
||||
1. Decide whether to edit or cancel the user's invitation to join your organization.
|
||||
1. Optionally, to filter the list of pending invitations by role or by source, use the dropdown menus at the top of the list.
|
||||
|
||||
|
||||
|
||||
- To edit the user's invitation, select a different role or team, then click **Update invitation**.
|
||||
- To cancel the user's invitation to join your organization, click **Cancel invitation**.
|
||||
|
||||
|
||||
## Further reading
|
||||
|
||||
|
|
|
|||
|
|
@ -25,7 +25,7 @@ After you create a custom role, anyone with admin access to a repository can ass
|
|||
|
||||
You can also use the REST API to create and manage custom repository roles. For more information, see "[AUTOTITLE](/rest/orgs/custom-roles)."
|
||||
|
||||
{% else %}
|
||||
{% elsif ghes < 3.8 %}
|
||||
|
||||
You can also use the REST API to list the custom repository roles available in your organization. For more information, see "[AUTOTITLE](/rest/orgs/custom-roles)."
|
||||
|
||||
|
|
|
|||
|
|
@ -32,7 +32,7 @@ shortTitle: Review dependency changes
|
|||
|
||||
Dependency review allows you to "shift left". You can use the provided predictive information to catch vulnerable dependencies before they hit production. For more information, see "[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review)."
|
||||
|
||||
{% ifversion fpt or ghec or ghes > 3.5 or ghae > 3.5 %}
|
||||
{% ifversion fpt or ghec or ghes > 3.5 %}
|
||||
|
||||
You can use the {% data variables.dependency-review.action_name %} to help enforce dependency reviews on pull requests in your repository. {% data reusables.dependency-review.dependency-review-action-overview %}
|
||||
|
||||
|
|
|
|||
|
|
@ -234,7 +234,7 @@ You can set a total cache storage size for your repository up to the maximum siz
|
|||
{% data reusables.repositories.settings-sidebar-actions-general %}
|
||||
{% data reusables.actions.change-cache-size-limit %}
|
||||
|
||||
{% else %}
|
||||
{% elsif ghes < 3.8 %}
|
||||
|
||||
The repository settings for {% data variables.product.prodname_actions %} cache storage can currently only be modified using the REST API:
|
||||
|
||||
|
|
|
|||
|
|
@ -5,4 +5,3 @@ versions:
|
|||
fpt: '*'
|
||||
ghec: '*'
|
||||
ghes: '> 3.6'
|
||||
ghae: '>= 3.7'
|
||||
|
|
|
|||
|
|
@ -4,4 +4,3 @@ versions:
|
|||
fpt: '*'
|
||||
ghec: '*'
|
||||
ghes: '> 3.4'
|
||||
ghae: '>= 3.5'
|
||||
|
|
|
|||
|
|
@ -2,4 +2,3 @@
|
|||
# APIs to set default and max cache sizes. Only for GHES.
|
||||
versions:
|
||||
ghes: '>=3.5'
|
||||
ghae: '>= 3.5'
|
||||
|
|
|
|||
|
|
@ -4,4 +4,3 @@ versions:
|
|||
fpt: '*'
|
||||
ghec: '*'
|
||||
ghes: '>=3.5'
|
||||
ghae: '>= 3.5'
|
||||
|
|
|
|||
|
|
@ -2,4 +2,3 @@
|
|||
versions:
|
||||
fpt: '*'
|
||||
ghec: '*'
|
||||
ghae: '>= 3.6'
|
||||
|
|
|
|||
|
|
@ -1,4 +1,3 @@
|
|||
# Reference: Issue #7753 Dependency review action has shipped with GHES 3.6 and needs admin docs
|
||||
versions:
|
||||
ghes: '>3.5'
|
||||
ghae: '>= 3.6'
|
||||
|
|
|
|||
|
|
@ -3,4 +3,3 @@
|
|||
versions:
|
||||
ghec: '*'
|
||||
ghes: '>=3.5'
|
||||
ghae: '>= 3.5'
|
||||
|
|
|
|||
|
|
@ -1,3 +1,2 @@
|
|||
versions:
|
||||
ghec: '*'
|
||||
ghae: '>= 3.6'
|
||||
|
|
|
|||
|
|
@ -0,0 +1,302 @@
|
|||
date: '2023-02-16'
|
||||
sections:
|
||||
features:
|
||||
- heading: 'Administrator experience'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2351
|
||||
- |
|
||||
Enterprise owners can join organizations on GitHub AE as a member or owner from the enterprise account's **Organizations** page. For more information, see "[Managing your role in an organization owned by your enterprise](/admin/user-management/managing-organizations-in-your-enterprise/managing-your-role-in-an-organization-owned-by-your-enterprise)."
|
||||
|
||||
- heading: 'Identity and access management'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/1945
|
||||
- |
|
||||
Custom repository roles are generally available. With custom repository roles, organization owners now have more granular control over the repository access permissions they can grant to users. Custom repository roles are also fully supported by the REST API. For more information, see "[Managing custom repository roles for an organization](/organizations/managing-peoples-access-to-your-organization-with-roles/managing-custom-repository-roles-for-an-organization)" and "[Organizations](/rest/reference/orgs#list-custom-repository-roles-in-an-organization)" in the REST API documentation.
|
||||
|
||||
- heading: 'Policies'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2073
|
||||
- |
|
||||
Enterprise owners can prevent organization owners from inviting collaborators to GitHub AE repositories. For more information, see "[Enforcing a policy for inviting collaborators to repositories](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-inviting-collaborators-to-repositories)."
|
||||
|
||||
- heading: 'GitHub Advanced Security'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2321
|
||||
- |
|
||||
Users can opt to receive a webhook event that triggers when someone enables or disables a code security or analysis feature for an organization or repository. For more information, see the following documentation.
|
||||
|
||||
- "[Webhook events and payloads](/developers/webhooks-and-events/webhooks/webhook-events-and-payloads#security_and_analysis)" in the webhook documentation
|
||||
- "[Managing security and analysis settings for your organization](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization)"
|
||||
- "[Managing security and analysis features for your repository](/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository)"
|
||||
# https://github.com/github/releases/issues/2318, https://github.com/github/releases/issues/2277
|
||||
- |
|
||||
Enterprise owners and users can view secret scanning alerts and bypasses of secret scanning's push protection in the enterprise and organization audit logs, and via the REST API. For more information, see the following documentation.
|
||||
|
||||
- "[Protecting pushes with secret scanning](/code-security/secret-scanning/protecting-pushes-with-secret-scanning)"
|
||||
- "[Audit log events for your enterprise](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/audit-log-events-for-your-enterprise#secret_scanning_push_protection-category-actions)"
|
||||
- "[Reviewing the audit log for your organization](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#secret_scanning_push_protection-category-actions)"
|
||||
- "[Secret Scanning](/rest/secret-scanning#list-secret-scanning-alerts-for-an-enterprise)" in the REST API documentation
|
||||
# https://github.com/github/releases/issues/1909
|
||||
- |
|
||||
Organization owners can now configure two new permissions for secret scanning when managing custom repository roles.
|
||||
|
||||
- View secret scanning results
|
||||
- Dismiss or reopen secret scanning results
|
||||
|
||||
For more information, see "[Managing custom repository roles for an organization](/organizations/managing-peoples-access-to-your-organization-with-roles/managing-custom-repository-roles-for-an-organization)."
|
||||
# https://github.com/github/releases/issues/1703, https://github.com/github/releases/issues/2084
|
||||
- |
|
||||
Users can execute a dry run of custom secret scanning patterns at the enterprise, organization, or repository level, depending on their access. Dry runs allow users to review and hone their patterns before publishing them and generating alerts. You can compose a pattern, then use **Save and dry run** to retrieve results. The scans typically take just a few seconds, but GitHub AE will also notify users via email when dry run results are ready. For more information, see "[About secret scanning](/code-security/secret-scanning/about-secret-scanning#about-secret-scanning-for-private-repositories)" and "[Defining custom patterns for secret scanning](/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning)."
|
||||
# https://github.com/github/releases/issues/2076
|
||||
- |
|
||||
Users can enable secret scanning for archived repositories using the UI or API. For more information, see "[About secret scanning](/code-security/secret-scanning/about-secret-scanning#about-secret-scanning-for-private-repositories)," "[About archived repositories](/repositories/archiving-a-github-repository/archiving-repositories)," and "[Repositories](/rest/repos/repos#update-a-repository)" in the REST API documentation.
|
||||
# https://github.com/github/releases/issues/2228
|
||||
- |
|
||||
Secret scanning prevents the leak of secrets in the web editor. For more information, see "[Protecting pushes with secret scanning](/code-security/secret-scanning/protecting-pushes-with-secret-scanning#using-secret-scanning-as-a-push-protection-from-the-web-ui)."
|
||||
# https://github.com/github/releases/issues/2097
|
||||
- |
|
||||
Code scanning now detects a larger number of CWEs, and CodeQL code scanning fully supports the standard language features in the following language releases.
|
||||
|
||||
- C# 10 / .NET 6
|
||||
- Python 3.10
|
||||
- Java 17
|
||||
- TypeScript 4.5
|
||||
|
||||
For more information, see the [GitHub Blog](https://github.blog/changelog/2022-02-25-code-scanning-detects-more-security-issues-supports-new-language-versions/).
|
||||
# https://github.com/github/releases/issues/1792
|
||||
- |
|
||||
Organization owners and security managers can view code scanning alerts in an organization's **Security** tab. For more information, see "[About the security overview](/code-security/security-overview/about-the-security-overview)."
|
||||
# https://github.com/github/releases/issues/2049
|
||||
- |
|
||||
The code scanning alert page now always shows the alert status and information for the default branch. There is a new "Affected branches" panel in the sidebar where you can see the status of the alert in other branches. If the alert does not exist in your default branch, the alert page will show the status as "In branch" or "In pull request" for the location where the alert was last seen. This improvement makes it easier to understand the status of alerts which have been introduced into the code base. For more information, see "[About code scanning alerts](/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-alerts#about-alert-details)." The alert list page is not changed and can be filtered by `branch`. You can use the code scanning API to retrieve more detailed branch information for alerts. For more information, see "[Code Scanning](/rest/code-scanning)" in the REST API documentation.
|
||||
# https://github.com/github/releases/issues/2050
|
||||
- |
|
||||
Code scanning now shows the details of the analysis origin of an alert. If an alert has more than one analysis origin, it is shown in the "Affected branches" sidebar and in the alert timeline. Users can hover over the analysis origin icon in the "Affected branches" sidebar to see the alert status in each analysis origin. If an alert only has a single analysis origin, no information about analysis origins is displayed on the alert page. These improvements will make it easier to understand alerts. In particular, it will help users understand those that have multiple analysis origins. This is especially useful for setups with multiple analysis configurations, such as monorepos. For more information, see "[About code scanning alerts](/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-alerts#about-analysis-origins)."
|
||||
# https://github.com/github/releases/issues/2236
|
||||
- |
|
||||
Users can use `sort` and `direction` parameters in the REST API when retrieving secret scanning alerts, and sort based on the alert’s `created` or `updated` fields. The new parameters are available for all of your GitHub AE deployment, or for individual organizations or repositories. For more information, see the following documentation.
|
||||
|
||||
- "[List secret scanning alerts for an enterprise](/rest/secret-scanning#list-secret-scanning-alerts-for-an-enterprise)"
|
||||
- "[List secret scanning alerts for an organization](/rest/secret-scanning#list-secret-scanning-alerts-for-an-organization)"
|
||||
- "[List secret scanning alerts for a repository](/rest/secret-scanning#list-secret-scanning-alerts-for-a-repository)"
|
||||
- "[Secret Scanning](/rest/secret-scanning)" in the REST API documentation
|
||||
# https://github.com/github/releases/issues/2149
|
||||
- |
|
||||
Users can opt to receive a webhook that triggers when a secret is detected in a new location. The `secret_scanning_alert_location` webhook event includes location details, like the commit SHA, and the associated alert for the detection. A location is created for every new file path containing the detected secret. For more information, see "[Webhook events and payloads](/developers/webhooks-and-events/webhooks/webhook-events-and-payloads#secret_scanning_alert_location)."
|
||||
# https://github.com/github/releases/issues/2191
|
||||
- |
|
||||
Users can optionally add a comment when dismissing a code scanning alert in the web UI or via the REST API. Dismissal comments appear in the event timeline. Users can also add or retrieve a dismissal comment via the REST API. For more information, see "[Triaging code scanning alerts in pull requests](/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/triaging-code-scanning-alerts-in-pull-requests#dismissing-an-alert-on-your-pull-request)" and "[Code Scanning](/rest/code-scanning#update-a-code-scanning-alert)" in the REST API documentation.
|
||||
# https://github.com/github/releases/issues/1763
|
||||
- |
|
||||
Users can now retrieve code scanning alerts for an organization using the REST API. This new API endpoint supplements the existing endpoint for repositories. For more information, see "[Code Scanning](/rest/code-scanning)" in the REST API documentation.
|
||||
# https://github.com/github/releases/issues/2263
|
||||
- |
|
||||
The contents of the `github/codeql-go` repository have moved to the `github/codeql` repository, to live alongside similar libraries for all other programming languages supported by CodeQL. The open-source CodeQL queries, libraries, and extractor for analyzing codebases written in the Go programming language with GitHub's CodeQL code analysis tools can now be found in the new location. For more information, including guidance on migrating your existing workflows, see [github/codeql-go#741](https://github.com/github/codeql-go/issues/741).
|
||||
|
||||
- heading: 'Dependabot'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2256
|
||||
- |
|
||||
Enterprise owners can see an overview of Dependabot alerts across the GitHub AE deployment, including a repository-centric view of application security risks, and an alert-centric view of all secret scanning and Dependabot alerts. The views are in beta and subject to change. For more information, see "[Viewing the security overview](/code-security/security-overview/viewing-the-security-overview#viewing-the-security-overview-for-an-enterprise)."
|
||||
# https://github.com/github/releases/issues/1992
|
||||
- |
|
||||
Organization owners and security managers can view Dependabot alerts in an organization's **Security** tab. For more information, see "[About the security overview](/code-security/security-overview/about-the-security-overview)."
|
||||
# https://github.com/github/releases/issues/1923
|
||||
- |
|
||||
Users can reopen a dismissed Dependabot alert using the web UI. This does not affect Dependabot pull requests or the GraphQL API. For more information, see "[About Dependabot alerts](/code-security/dependabot/dependabot-alerts/about-dependabot-alerts)."
|
||||
# https://github.com/github/releases/issues/1922
|
||||
- |
|
||||
Users can view fixed alerts from Dependabot with the GraphQL API. Users can also access and filter by state, as well as by unique numeric identifier, and filter by state on the vulnerability alert object. The following fields now exist for a `RepositoryVulnerabilityAlert`.
|
||||
|
||||
- `number`
|
||||
- `fixed_at`
|
||||
- `fix_reason`
|
||||
- `state`
|
||||
|
||||
For more information, see "[Objects](/graphql/reference/objects#repositoryvulnerabilityalert)" in the GraphQL API documentation.
|
||||
|
||||
- heading: 'Code security'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2096
|
||||
- |
|
||||
Organization owners and security managers can use the security overview for an organization to view a repository-centric view of application security risks, or an alert-centric view of all code scanning, Dependabot, and secret scanning alerts for all repositories in an organization. For more information, see "[About the security overview](/code-security/security-overview/about-the-security-overview)."
|
||||
# https://github.com/github/releases/issues/2098, https://github.com/github/releases/issues/2282
|
||||
- |
|
||||
GitHub Actions can enforce dependency reviews on users' pull requests by scanning for dependencies, and will warn users about associated security vulnerabilities. The `dependency-review-action` action is supported by a new API endpoint that diffs the dependencies between any two revisions. For more information, see "[About dependency review](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement)."
|
||||
# https://github.com/github/releases/issues/1913
|
||||
- |
|
||||
The dependency graph detects YAML files for GitHub Actions workflows. GitHub AE will display the workflow files within the **Insights** tab's dependency graph section. Repositories that publish actions will also be able to see the number of repositories that depend on that action from the "Used By" control on the repository homepage. For more information, see "[About the dependency graph](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph)."
|
||||
# https://github.com/github/releases/issues/2243
|
||||
- |
|
||||
The dependency graph detects `Cargo.toml` and `Cargo.lock` files for Rust. These files will be displayed in the **Dependency graph** section of the **Insights** tab. Users will receive Dependabot alerts and updates for vulnerabilities associated with their Rust dependencies. Package metadata, including mapping packages to repositories, will be added at a later date. For more information, see "[About the dependency graph](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph)."
|
||||
# https://github.com/github/releases/issues/1766
|
||||
- |
|
||||
If GitHub Connect is enabled for GitHub AE, users can contribute an improvement to a security advisory in the [GitHub Advisory Database](https://github.com/advisories). To contribute, click **Suggest improvements for this vulnerability** while viewing an advisory's details. For more information, see the following articles.
|
||||
|
||||
- "[Managing GitHub Connect](/admin/configuration/configuring-github-connect/managing-github-connect)"
|
||||
- "[Browsing security vulnerabilities in the GitHub Advisory Database](/enterprise-cloud@latest/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/browsing-security-vulnerabilities-in-the-github-advisory-database)" in the GitHub Enterprise Cloud documentation
|
||||
- "[About GitHub Security Advisories for repositories](/enterprise-cloud@latest/code-security/repository-security-advisories/about-github-security-advisories-for-repositories)" in the GitHub Enterprise Cloud documentation
|
||||
- "[Editing security advisories in the GitHub Advisory Database](/enterprise-cloud@latest/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/editing-security-advisories-in-the-github-advisory-database)" in the GitHub Enterprise Cloud documentation
|
||||
|
||||
- heading: 'GitHub Actions'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2014
|
||||
- |
|
||||
People who maintain self-hosted runners now have more control over when the runners perform software updates. If you specify the `--disableupdate` flag to the runner, the runner will not try to perform an automatic software update if a newer version of the runner software is available. This allows updates to the self-hosted runner on a custom schedule, and is especially convenient if a self-hosted runner is in a container. For compatibility with the GitHub Actions service, runner software must be updated within 30 days of a new runner version being available. For more information about installation of the latest runner version, see the installation instructions for [the latest release in `actions/runner`](https://github.com/actions/runner/releases).
|
||||
# https://github.com/github/releases/issues/2102
|
||||
- |
|
||||
When using GitHub Actions, to reduce the risk of merging a change that was not reviewed by another person into a protected branch, enterprise owners and repository administrators can prevent Actions from creating pull requests. Organization owners could previously enable this restriction. For more information, see the following articles.
|
||||
|
||||
- "[Enforcing policies for GitHub Actions in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#preventing-github-actions-from-creating-or-approving-pull-requests)"
|
||||
- "[Disabling or limiting GitHub Actions for your organization](/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests)"
|
||||
- "[Managing GitHub Actions settings for a repository](/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests)"
|
||||
# https://github.com/github/releases/issues/2013
|
||||
- |
|
||||
Organization owners can increase the security of CI/CD workflows on self-hosted runners by choosing which workflows can access a runner group. Previously, any workflow in a repository, such as an issue labeler, could access the self-hosted runners available to an organization. For more information, see "[Managing access to self-hosted runners using groups](/actions/hosting-your-own-runners/managing-access-to-self-hosted-runners-using-groups#changing-what-workflows-can-access-a-runner-group)" and the [GitHub Blog](https://github.blog/2022-03-23-github-actions-secure-self-hosted-runners-specific-workflows/).
|
||||
# https://github.com/github/releases/issues/1959
|
||||
- |
|
||||
Organization owners can control whether GitHub Actions can approve pull requests. This feature protects against a user using GitHub Actions to satisfy the "Required approvals" branch protection requirement and merging a change that was not reviewed by another user. To prevent breaking existing workflows, **Allow GitHub Actions reviews to count towards required approval** is enabled by default. Organization owners can disable the feature in the organization's GitHub Actions settings. For more information, see "[Disabling or limiting GitHub Actions for your organization](/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-approving-pull-requests)."
|
||||
# https://github.com/github/releases/issues/2155
|
||||
- |
|
||||
Users can write a single workflow triggered by `workflow_dispatch` and `workflow_call`, and use the `inputs` context to access input values. Previously, `workflow_dispatch` inputs were in the event payload, which increased difficulty for workflow authors who wanted to write one workflow that was both reusable and manually triggered. For workflows triggered by `workflow_dispatch`, inputs are still available in the `github.event.inputs` context to maintain compatibility. For more information, see "[Contexts](/actions/learn-github-actions/contexts#inputs-context)."
|
||||
# https://github.com/github/releases/issues/1503
|
||||
- |
|
||||
Users can now re-run only failed jobs or an individual job in a GitHub Actions workflow run. For more information, see "[Re-running workflows and jobs](/actions/managing-workflow-runs/re-running-workflows-and-jobs)."
|
||||
# https://github.com/github/releases/issues/2103
|
||||
- |
|
||||
To summarize the result of a job, users can generate Markdown and publish the contents as a job summary. For example, after running tests with GitHub Actions, a summary can provide an overview of passed, failed, or skipped tests, potentially reducing the need to review the full log output. For more information, see "[Workflow commands for GitHub Actions](/actions/using-workflows/workflow-commands-for-github-actions#adding-a-job-summary)."
|
||||
# https://github.com/github/releases/issues/2161
|
||||
- |
|
||||
To more easily diagnose job execution failures during a workflow re-run, users can enable debug logging, which outputs information about a job's execution and environment. For more information, see "[Re-running workflows and jobs](/actions/managing-workflow-runs/re-running-workflows-and-jobs)" and "[Using workflow run logs](/actions/monitoring-and-troubleshooting-workflows/using-workflow-run-logs#viewing-logs-to-diagnose-failures)."
|
||||
# https://github.com/github/releases/issues/2140
|
||||
- |
|
||||
If you manage self-hosted runners for GitHub Actions, you can ensure a consistent state on the runner itself before and after a workflow run by defining scripts to execute. By using scripts, you no longer need to require that users manually incorporate these steps into workflows. Pre- and post-job scripts are in beta and subject to change. For more information, see "[Running scripts before or after a job](/actions/hosting-your-own-runners/running-scripts-before-or-after-a-job)."
|
||||
|
||||
- heading: 'Community experience'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2259
|
||||
- |
|
||||
Enterprise owners can configure a policy to control whether people's usernames or full names are displayed within internal repositories. For more information, see "[Enforcing repository management policies in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-the-display-of-member-names-in-your-repositories)."
|
||||
|
||||
- heading: 'Organizations'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2234
|
||||
- |
|
||||
Organization owners can pin a repository to an organization's profile directly from the repository via the new **Pin repository** dropdown.
|
||||
|
||||
- heading: 'Repositories'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2214
|
||||
- |
|
||||
While creating a fork, users can customize the fork's name. For more information, see "[Fork a repo](/get-started/quickstart/fork-a-repo)."
|
||||
# https://github.com/github/releases/issues/2220
|
||||
- |
|
||||
Users can delete a branch that's associated with an open pull request. For more information, see "[Creating and deleting branches within your repository](/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-and-deleting-branches-within-your-repository)."
|
||||
# https://github.com/github/releases/issues/1994
|
||||
- |
|
||||
CODEOWNERS has received the following improvements.
|
||||
|
||||
- Syntax errors are now surfaced when viewing a CODEOWNERS file from the web UI. Previously, when a line in a CODEOWNERS file had a syntax error, the error would be ignored or in some cases cause the entire CODEOWNERS file to not load. GitHub Apps and Actions can access the same list of errors using new REST and GraphQL APIs. For more information, see "[Repositories](/rest/repos/repos#list-codeowners-errors)" in the REST API documentation or "[Objects](/graphql/reference/objects#repositorycodeowners)" in the GraphQL API documentation.
|
||||
- After someone creates a new pull request or pushes new changes to a draft pull request, any code owners that will be requested for review are now listed in the pull request under "Reviewers". This feature gives you an early look at who will be requested to review once the pull request is marked ready for review.
|
||||
- Comments in CODEOWNERS files can now appear at the end of a line, not just on dedicated lines.
|
||||
|
||||
For more information, see "[About code owners](/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners)."
|
||||
# https://github.com/github/releases/issues/2233
|
||||
- |
|
||||
When a user renames or moves a file to a new directory, if at least half of the file's contents are identical, the commit history indicates that the file was renamed, similar to `git log --follow`. For more information, see the [GitHub Blog](https://github.blog/changelog/2022-06-06-view-commit-history-across-file-renames-and-moves/).
|
||||
# https://github.com/github/releases/issues/2093
|
||||
- |
|
||||
Users can require a successful deployment of a branch before anyone can merge the pull request associated with the branch. For more information, see "[About protected branches](/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/about-protected-branches#require-deployments-to-succeed-before-merging)" and "[Managing a branch protection rule](/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/managing-a-branch-protection-rule)."
|
||||
# https://github.com/github/releases/issues/1793
|
||||
- |
|
||||
Repository administrators can now configure tag protection rules to protect a repository's tags. Once protected by a tag protection rule, tags matching a specified name pattern can only be created and deleted by users with maintain or admin access to the repository. For more information, see "[Configuring tag protection rules](/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/configuring-tag-protection-rules)."
|
||||
# https://github.com/github/releases/issues/2090
|
||||
- |
|
||||
Users can ignore revisions in the blame view by creating a `.git-blame-ignore-revs` file in the root of a repository. For more information, see "[Viewing a file](/repositories/working-with-files/using-files/viewing-a-file#ignore-commits-in-the-blame-view)."
|
||||
# https://github.com/github/releases/issues/2173
|
||||
- |
|
||||
Users can grant exceptions to GitHub Apps for any branch protection rule that supports exceptions. For more information, see "[About apps](/developers/apps/getting-started-with-apps/about-apps)" and "[Managing a branch protection rule](/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/managing-a-branch-protection-rule)."
|
||||
|
||||
- heading: 'Commits'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2306
|
||||
- |
|
||||
For public GPG signing keys that are expired or revoked, GitHub AE verifies Git commit signatures and show commits as verified if the user made the commit while the key was still valid. Users can also upload expired or revoked GPG keys. For more information, see "[About commit signature verification](/authentication/managing-commit-signature-verification/about-commit-signature-verification)."
|
||||
# https://github.com/github/releases/issues/1977
|
||||
- |
|
||||
To affirm that a commit complies with the rules and licensing governing a repository, organization owners and repository administrators can now require developers to sign off on commits made through the web interface. For more information, see "[Managing the commit signoff policy for your organization](/organizations/managing-organization-settings/managing-the-commit-signoff-policy-for-your-organization)" and "[Managing the commit signoff policy for your repository](/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/managing-the-commit-signoff-policy-for-your-repository)."
|
||||
|
||||
- heading: 'Pull requests'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2261
|
||||
- |
|
||||
Using the file tree located in the **Files changed** tab of a pull request, users can navigate modified files, understand the size and scope of changes, and focus reviews. The file tree appears if a pull request modifies at least two files, and the browser window is sufficiently wide. For more information, see "[Reviewing proposed changes in a pull request](/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-proposed-changes-in-a-pull-request)" and "[Filtering files in a pull request](/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/filtering-files-in-a-pull-request)."
|
||||
# https://github.com/github/releases/issues/2167
|
||||
- |
|
||||
Users can default to using pull requests titles as the commit message for all squash merges. For more information, see "[Configuring commit squashing for pull requests](/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/configuring-commit-squashing-for-pull-requests)."
|
||||
# https://github.com/github/releases/issues/1566
|
||||
- |
|
||||
The **Update branch** button on the pull request page lets users update a pull request's branch with the latest changes from the base branch. This is useful for verifying that the pull request's changes are compatible with the current version of the base branch before you merge. Two enhancements provide more ways to keep a branch up to date.
|
||||
|
||||
- When a pull request's topic branch is out of date with the base branch, users can update the branch by rebasing on the latest version of the base branch. Rebasing applies the changes from the topic branch onto the latest version of the base branch, resulting in a branch with a linear history since no merge commit is created. To update by rebasing, click the drop-down menu next to the **Update Branch** button, click **Update with rebase**, and then click **Rebase branch**. Previously, **Update branch** performed a traditional merge that always resulted in a merge commit in your pull request branch. This option is still available, but now users have the choice. For more information, see "[Keeping your pull request in sync with the base branch](/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/keeping-your-pull-request-in-sync-with-the-base-branch)."
|
||||
- A new repository setting allows the **Update branch** button to always be available when a pull request's topic branch is not up to date with the base branch. Previously, this button was only available when the **Require branches to be up to date before merging** branch protection setting was enabled. People with admin or maintainer access can manage the **Always suggest updating pull request branches** setting from the **Pull Requests** section in repository settings. For more information, see "[Managing suggestions to update pull request branches](/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/managing-suggestions-to-update-pull-request-branches)."
|
||||
|
||||
- heading: 'Releases'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2281
|
||||
- |
|
||||
When viewing the details for a particular release, users can see the creation date for each release asset. For more information, see "[Viewing your repository's releases and tags](/repositories/releasing-projects-on-github/viewing-your-repositorys-releases-and-tags)."
|
||||
# https://github.com/github/releases/issues/2279
|
||||
- |
|
||||
While creating a release with automatically generated release notes, users can see the tag identified as the previous release, then choose to select a different tag to specify as the previous release. For more information, see "[Automatically generated release notes](/repositories/releasing-projects-on-github/automatically-generated-release-notes)."
|
||||
# https://github.com/github/releases/issues/2028
|
||||
- heading: 'Gist'
|
||||
notes:
|
||||
- |
|
||||
Gists now only show the 30 most recent comments when first displayed. Users can click **Load earlier comments...** to view more. This allows gists that have many comments to appear more quickly. For more information, see "[Editing and sharing content with gists](/get-started/writing-on-github/editing-and-sharing-content-with-gists)."
|
||||
|
||||
- heading: 'Markdown'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2260
|
||||
- |
|
||||
Editing Markdown in the web interface has been improved.
|
||||
|
||||
- After a user selects text and pastes a URL, the selected text will become a Markdown link to the pasted URL.
|
||||
- When a user pastes spreadsheet cells or HTML tables, the resulting text will render as a table.
|
||||
- When a user copies text containing links, the pasted text will include the link as a Markdown link.
|
||||
|
||||
For more information, see "[Basic writing and formatting syntax](/get-started/writing-on-github/getting-started-with-writing-and-formatting-on-github/basic-writing-and-formatting-syntax#links)."
|
||||
# https://github.com/github/releases/issues/2258
|
||||
- |
|
||||
When editing a Markdown file in the web interface, clicking the **Preview** tab will automatically scroll to the place in the preview that you were editing. The scroll location is based on the position of the cursor before clicking the **Preview** tab.
|
||||
|
||||
- heading: 'Accessibility'
|
||||
notes:
|
||||
# https://github.com/github/releases/issues/2011
|
||||
- |
|
||||
A light high-contrast theme, with greater contrast between foreground and background elements, is now available. For more information, see "[Managing your theme settings](/account-and-profile/setting-up-and-managing-your-github-user-account/managing-user-account-settings/managing-your-theme-settings)."
|
||||
|
||||
changes:
|
||||
# https://github.com/github/releases/issues/2071
|
||||
- |
|
||||
Lists of repositories owned by a user or organization now have an additional filter option, "Templates", making it easier to find template repositories.
|
||||
# https://github.com/github/releases/issues/1947
|
||||
- |
|
||||
GitHub AE can display several common image formats, including PNG, JPG, GIF, PSD, and SVG, and provides several ways to compare differences between versions. When reviewing added or changed images in a pull request, previews of those images are now shown by default. Previously, users would see a message indicating that binary files could not be shown, and would need to toggle the "Display rich diff" option. For more information, see "[Working with non-code files](/repositories/working-with-files/using-files/working-with-non-code-files)."
|
||||
# https://github.com/github/releases/issues/2036
|
||||
- |
|
||||
Settings pages for users, organizations, repositories, and teams have been redesigned, grouping similar settings pages into sections for improved information architecture and discoverability. For more information, see the [GitHub Changelog](https://github.blog/changelog/2022-02-02-redesign-of-githubs-settings-pages/).
|
||||
- |
|
||||
Interactive elements in the web interface such as links and buttons show a visible outline when focused with a keyboard, to help users find the current position on a page. In addition, when focused, form fields have a higher contrast outline.
|
||||
# https://github.com/github/releases/issues/2129
|
||||
- |
|
||||
Focusing or hovering over a label now displays a tooltip with the label's description.
|
||||
- |
|
||||
If a user refreshes the page while creating a new issue or pull request, the assignees, reviewers, labels, and projects will all be preserved.
|
||||
# https://github.com/github/releases/issues/2063
|
||||
- |
|
||||
To use the device authorization flow for OAuth and GitHub Apps, app authors must manually enable the feature. This change reduces the likelihood of apps being used in phishing attacks against GitHub AE users by ensuring integrators are aware of the risks and make a conscious choice to support this form of authentication. Users who own or manage an OAuth App or GitHub App and want to use the device flow can enable it for an app via the app's settings page. The device flow API endpoints will respond with status code `400` to apps that have not enabled this feature. For more information, see "[Authorizing OAuth Apps](/developers/apps/building-oauth-apps/authorizing-oauth-apps#device-flow)."
|
||||
|
||||
deprecations:
|
||||
- |
|
||||
The theme picker for GitHub Pages has been removed from the Pages settings. For more information about configuration of themes for GitHub Pages, see "[Adding a theme to your GitHub Pages site using Jekyll](/pages/setting-up-a-github-pages-site-with-jekyll/adding-a-theme-to-your-github-pages-site-using-jekyll)."
|
||||
|
|
@ -1,3 +1,3 @@
|
|||
The {% data variables.dependency-review.action_name %} scans your pull requests for dependency changes and raises an error if any new dependencies have known vulnerabilities. The action is supported by an API endpoint that compares the dependencies between two revisions and reports any differences.
|
||||
The {% data variables.dependency-review.action_name %} scans your pull requests for dependency changes and raises an error if any new dependencies have known vulnerabilities.{% ifversion fpt or ghec or ghes %} The action is supported by an API endpoint that compares the dependencies between two revisions and reports any differences.{% endif %}
|
||||
|
||||
For more information about the action and the API endpoint, see the [`dependency-review-action`](https://github.com/actions/dependency-review-action) documentation, and "[AUTOTITLE](/rest/dependency-graph/dependency-review)" in the API documentation.
|
||||
For more information about the action{% ifversion fpt or ghec or ghes %} and the API endpoint{% endif %}, see the [`dependency-review-action`](https://github.com/actions/dependency-review-action) documentation{% ifversion fpt or ghec or ghes %}, and "[AUTOTITLE](/rest/dependency-graph/dependency-review)" in the API documentation.{% endif %}
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
1. In the left sidebar, under the list of repositories, use the "Manage notifications" drop-down to click **Notification settings**.
|
||||
|
||||
|
||||
|
|
|
|||
|
|
@ -57,7 +57,7 @@ const plans = [
|
|||
latestRelease: latestNonNumberedRelease,
|
||||
// The below is used in lib/liquid-tags/ifversion.js and lib/get-applicable-versions.js.
|
||||
// It lets us do semantic comparison internally while only exposing `@latest` in the UI.
|
||||
internalLatestRelease: '3.4',
|
||||
internalLatestRelease: '3.6',
|
||||
hasNumberedReleases: false,
|
||||
openApiBaseName: 'ghae',
|
||||
miscBaseName: 'ghae',
|
||||
|
|
|
|||
Загрузка…
Ссылка в новой задаче