Skip to content

Add Dependabot ecosystem support for Kotlin Toolchain - #45765

Open
IRus wants to merge 1 commit into
github:mainfrom
IRus:dependabot-kotlin-toolchain
Open

Add Dependabot ecosystem support for Kotlin Toolchain#45765
IRus wants to merge 1 commit into
github:mainfrom
IRus:dependabot-kotlin-toolchain

Conversation

@IRus

@IRusIRus commented Sep 6, 2026

Copy link
Copy Markdown

Why:

Dependabot is adding support for Kotlin Toolchain (by JetBrains, formerly Amper) as a beta ecosystem, and the docs do not mention it yet.

What's being changed (if available, include any code snippets, screenshots, or gifs):

  • Adds the dependabot-kotlin-toolchain-support feature flag (data/features/).
  • Adds a Kotlin Toolchain row and a short "Kotlin Toolchain" section to the supported package managers reusable: YAML value kotlin-toolchain, toolchain 0.11 and later, the manifest files it updates (project.yaml, module.yaml, *.module-template.yaml, libs.versions.toml), the kotlin/kotlin.bat wrapper scripts, and maven-repository private registries.
  • Adds Kotlin Toolchain to the package-ecosystem and cooldown tables in the Dependabot options reference.
  • Documents enable-beta-ecosystems, listing Kotlin Toolchain as the ecosystem currently in public preview, with a dependabot.yml example. The "Not currently in use." text is kept for versions without the feature flag.
  • Adds a Kotlin Toolchain row to the supported versioning tags table. It uses the same Maven-style qualifiers as Gradle.

Check off the following:

  • A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
  • The changes in this PR meet the docs fundamentals that are required for all content.
  • All CI checks are passing and the changes look good in the review environment.

@github-actionsgithub-actionsBot added the triage Do not begin working on this issue until triaged by the team label Sep 6, 2026
@github-actions

Copy link
Copy Markdown
Contributor

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

SourceReviewProductionWhat Changed
code-security/reference/supply-chain-security/dependabot-options-reference.mdfpt
ghec
ghes@ 3.223.213.203.193.183.17
fpt
ghec
ghes@ 3.223.213.203.193.183.17
code-security/reference/supply-chain-security/supported-ecosystems-and-repositories.mdfpt
ghec
ghes@ 3.223.213.203.193.183.17
fpt
ghec
ghes@ 3.223.213.203.193.183.17
from reusable

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

triageDo not begin working on this issue until triaged by the team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@IRus