Skip to content

Security: Skenvy/dependabot-linguist

Security

SECURITY.md

Security Policy

Supported Versions

The <major>.<minor>.* versions of this are pinned to the supported <major>.<minor>.* versions of the gems that are published by the dependabot-core repository, centric to the dependabot-common gem, with any required patches applied to each supported minor version.

  • Support version 0.212.0, centric to [email protected]
    • This is because this is the last version to support a Ruby version of 2.7.0.
  • Support version 0.217.0, centric to [email protected]

Bugs present in only the most recent pinned minor version may be patched and contribute to successive patch versions. If a bug exists in an older version and no longer exists in a newer version, it is suggested to update to the newer version. As the underlying package this wraps, dependabot[-omnibus], is a live service, it makes sense for this to only roll forward.

Reporting a Vulnerability

Raise a Security Vulnerability issue.

There aren’t any published security advisories