Skip to content

Commit cc352d9

Browse files
fix: move caution box and add base image TRG link
1 parent a8fa427 commit cc352d9

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

docs/release/trg-0/trg-2-6.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ Key Benefits:
2020

2121
Dependabot is an excellent fit for application dependencies/vulnerabilities. By regularly checking for updates, it allows you to seamlessly integrate the latest improvements into your application.
2222

23-
For Docker images, Dependabot ensures that your base images and dependencies are regularly updated, reducing the risk of using outdated or vulnerable components.
23+
For Docker images, Dependabot ensures that your [base images](https://eclipse-tractusx.github.io/docs/release/trg-4/trg-4-02) and dependencies are regularly updated, reducing the risk of using outdated or vulnerable components.
2424

2525
Dependabot can also assist in keeping used GitHub Actions up to date. This is crucial for ensuring that your workflows leverage the latest GitHub Actions features and improvements.
2626

@@ -38,6 +38,11 @@ To enable Dependabot for version updates, create a dependabot.yml file in .githu
3838

3939
This configuration checks for Maven, GitHub Action and Docker updates on a weekly basis and creates pull requests for up to 5 updates at a time.
4040

41+
:::caution
42+
Be careful, Dependabot PR merge can lead to out of date DEPENDENCIES file.
43+
Make sure DEPENDENCIES file is updated by DASH tool.
44+
:::
45+
4146
```yaml
4247
version: 2
4348
updates:
@@ -67,11 +72,6 @@ More information:
6772
<https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates>
6873
<https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file>
6974
70-
:::caution
71-
Be careful, Dependabot PR merge can lead to out of date DEPENDENCIES file.
72-
Make sure DEPENDENCIES file is updated by DASH tool.
73-
:::
74-
7575
:::info
7676
Importance of Implemented Tests:
7777

0 commit comments

Comments
 (0)