Update dependabot.yml file naming information to include the .yaml extension by DanGM96 · Pull Request #43123 · github/docs
Conversation
Clarified that the dependabot configuration file can be named dependabot.yaml in addition to dependabot.yml.
References:
- Consider allowing to use .yaml instead of .yml as file extension dependabot/feedback#874
- https://github.com/yaml/go-yaml/blob/main/.github/dependabot.yaml
Why:
In practice this has been possible for many years and the documentation does not reflect it.
Resulting in AI chats such as Copilot denying the possibility of using the .yaml extension.
What's being changed:
Just a minor part of the documentation, although it could be more explicit and added in other places, it should allow for Search Engines and AI Bots to reach the information.
Check off the following:
- A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
- The changes in this PR meet the docs fundamentals that are required for all content.
- All CI checks are passing and the changes look good in the review environment.
Copilot AI review requested due to automatic review settings
February 24, 2026 17:33Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR updates the Dependabot configuration documentation to explicitly note that the config file may use the .yaml extension (in addition to .yml), aligning the docs with real-world behavior.
Changes:
- Update the documented config file path to mention
.github/dependabot.yamlas an accepted alternative to.github/dependabot.yml.
| ## Where to store the `dependabot.yml` file | ||
|
|
||
| You must store this file in the `.github` directory of your repository in the default branch (typically `main`). The path is: `.github/dependabot.yml`. | ||
| You must store this file in the `.github` directory of your repository in the default branch (typically `main`). The path is: `.github/dependabot.yml` (you can also use `.github/dependabot.yaml`). |
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There are two spaces after the colon in "The path is: .github/dependabot.yml", which looks like an editing artifact and can trip content linting/formatting. Consider tightening the sentence (for example, avoid the colon/parenthetical) and use a single space.
| You must store this file in the `.github` directory of your repository in the default branch (typically `main`). The path is: `.github/dependabot.yml` (you can also use `.github/dependabot.yaml`). | |
| You must store this file in the `.github` directory of your repository in the default branch (typically `main`), at `.github/dependabot.yml` or `.github/dependabot.yaml`. |
Copilot uses AI. Check for mistakes.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have no strong feelings about this change and the double spaces were already there. A maintainer can commit the suggestion if they agree with the bot.
@DanGM96 I'll check and make sure there's no reason we aren't documenting this.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters