From ddd060ea86dafbadd60e50f4f777509099a8abf6 Mon Sep 17 00:00:00 2001 From: Rafael O <63917405+raf2k07@users.noreply.github.com> Date: Wed, 29 Apr 2026 08:57:53 +0200 Subject: [PATCH] Update pnpm version support in dependabot options According to this discussion https://github.com/dependabot/dependabot-core/issues/11246 and this page https://docs.github.com/en/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories#supported-ecosystems-and-repositories, pnpm v10 is supported for both version and security updates, but the dependabot-options-reference says that v9 and v10 only have version updates. --- .../supply-chain-security/dependabot-options-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/code-security/reference/supply-chain-security/dependabot-options-reference.md b/content/code-security/reference/supply-chain-security/dependabot-options-reference.md index 9e6fe24b0bdd..3ab23f74cf0e 100644 --- a/content/code-security/reference/supply-chain-security/dependabot-options-reference.md +++ b/content/code-security/reference/supply-chain-security/dependabot-options-reference.md @@ -572,7 +572,7 @@ Package manager | YAML value | Supported versions | | pip | `pip` | 24.2 | | pip-compile | `pip` | 7.5.3 | | pipenv | `pip` | <= 2024.4.1 | -| pnpm | `npm` | v7, v8
v9, v10 (version updates only) | +| pnpm | `npm` | v7, v8, v9, v10 | | poetry | `pip` | v2 | | {% ifversion dependabot-pre-commit-support %} | | pre-commit | `pre-commit` | Not applicable |