github · Octomerger · Sep 2, 2022 · Sep 1, 2022 · Sep 2, 2022 · Sep 2, 2022
diff --git a/...ecurity-for-your-enterprise/configuring-dependency-review-for-your-appliance.md b/...ecurity-for-your-enterprise/configuring-dependency-review-for-your-appliance.md
@@ -0,0 +1,52 @@
+---
+title: Configuring dependency review for your appliance
+shortTitle: Configuring dependency review
+intro: 'To helps users understand dependency changes when reviewing pull requests, you can enable, configure, and disable dependency review for {% data variables.product.product_location %}.' 
+product: '{% data reusables.gated-features.dependency-review %}'
+miniTocMaxHeadingLevel: 3
+versions:
+  feature: dependency-review-action-ghes
+type: how_to
+topics:
+  - Advanced Security
+  - Enterprise
+  - Dependency review
+  - Security
+---
+
+{% data reusables.dependency-review.beta %}
+
+## About dependency review
+
+{% data reusables.dependency-review.feature-overview %}  
+
+Some additional features, such as license checks, blocking of pull requests, and CI/CD integration, are available with the [dependency review action](https://github.com/actions/dependency-review-action).
+
+## Checking whether your license includes {% data variables.product.prodname_GH_advanced_security %}
+
+{% data reusables.advanced-security.check-for-ghas-license %}
+
+## Prerequisites for dependency review
+
+- A license for {% data variables.product.prodname_GH_advanced_security %}{% ifversion ghes %} (see "[About billing for {% data variables.product.prodname_GH_advanced_security %}](/billing/managing-billing-for-github-advanced-security/about-billing-for-github-advanced-security)").{% endif %}
+
+- The dependency graph enabled for the instance. Site administrators can enable the dependency graph via the management console or the administrative shell (see "[Enabling the dependency graph for your enterprise](/admin/code-security/managing-supply-chain-security-for-your-enterprise/enabling-the-dependency-graph-for-your-enterprise)").
+
+- {% data variables.product.prodname_github_connect %} enabled to download and synchronize vulnerabilities from the {% data variables.product.prodname_advisory_database %}. This is usually configured as part of setting up {% data variables.product.prodname_dependabot %} (see "[Enabling Dependabot for your enterprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise)").
+
+## Enabling and disabling dependency review
+
+To enable or disable dependency review, you need to enable or disable the dependency graph for your instance.
+
+For more information, see "[Enabling the dependency graph for your enterprise](/admin/code-security/managing-supply-chain-security-for-your-enterprise/enabling-the-dependency-graph-for-your-enterprise)."
+
+## Running dependency review using {% data variables.product.prodname_actions %}
+
+{% data reusables.dependency-review.dependency-review-action-beta-note %}
+
+The dependency review action is included in your installation of {% data variables.product.prodname_ghe_server %}. It is available for all repositories that have {% data variables.product.prodname_GH_advanced_security %} and dependency graph enabled.
+
+{% data reusables.dependency-review.dependency-review-action-overview %}  
+
+Users run the dependency review action using a {% data variables.product.prodname_actions %} workflow. If you have not already set up runners for {% data variables.product.prodname_actions %}, you must do this to enable users to run workflows. You can provision self-hosted runners at the repository, organization, or enterprise account level. For information, see "[About self-hosted runners](/actions/hosting-your-own-runners/about-self-hosted-runners)" and "[Adding self-hosted runners](/actions/hosting-your-own-runners/adding-self-hosted-runners)."
+
diff --git a/...in/code-security/managing-github-advanced-security-for-your-enterprise/index.md b/...in/code-security/managing-github-advanced-security-for-your-enterprise/index.md
@@ -14,6 +14,7 @@ topics:
 children:
   - /enabling-github-advanced-security-for-your-enterprise
   - /configuring-code-scanning-for-your-appliance
+  - /configuring-dependency-review-for-your-appliance
   - /configuring-secret-scanning-for-your-appliance
 ---
 
diff --git a/...curity-for-your-enterprise/enabling-the-dependency-graph-for-your-enterprise.md b/...curity-for-your-enterprise/enabling-the-dependency-graph-for-your-enterprise.md
@@ -23,7 +23,7 @@ You can enable the dependency graph via the {% data variables.enterprise.managem
 
 ## Enabling the dependency graph via the {% data variables.enterprise.management_console %}
 
-If your {% data variables.product.product_location %} uses clustering, you cannot enable the dependency graph with the {% data variables.enterprise.management_console %} and must use the administrative shell instead. For more information, see "[Enabling the dependency graph via the administrative shell](#enabling-the-dependency-graph-via-the-administrative-shell)."
+If {% data variables.product.product_location %} uses clustering, you cannot enable the dependency graph with the {% data variables.enterprise.management_console %} and must use the administrative shell instead. For more information, see "[Enabling the dependency graph via the administrative shell](#enabling-the-dependency-graph-via-the-administrative-shell)."
 
 {% data reusables.enterprise_site_admin_settings.sign-in %}
 {% data reusables.enterprise_site_admin_settings.access-settings %}

diff --git a/content/admin/guides.md b/content/admin/guides.md
@@ -45,6 +45,7 @@ includeGuides:
   - /admin/configuration/configuring-built-in-firewall-rules
   - /admin/configuration/configuring-code-scanning-for-your-appliance
   - /admin/configuration/configuring-data-encryption-for-your-enterprise
+  - /admin/code-security/managing-github-advanced-security-for-your-enterprise/configuring-dependency-review-for-your-appliance
   - /admin/configuration/configuring-dns-nameservers
   - /admin/configuration/configuring-rate-limits
   - /admin/configuration/configuring-secret-scanning-for-your-appliance

diff --git a/...urity/understanding-your-software-supply-chain/configuring-dependency-review.md b/...urity/understanding-your-software-supply-chain/configuring-dependency-review.md
@@ -75,7 +75,7 @@ The following configuration options are available.
 {% endtip %}
 {% endif %}
 
-This {% data variables.product.prodname_dependency_review_action %} example file illustrates how you can use these configuration options.
+This {% data variables.product.prodname_dependency_review_action %} example file illustrates how you can use these configuration options. Notice that the example uses short version number for the action (`v2`) instead of a semver release number (for example, `v2.0.8`). This ensures that you use the most recent minor version of the action.
 
 ```yaml{:copy}
 name: 'Dependency Review'

diff --git a/...corporating-changes-from-a-pull-request/automatically-merging-a-pull-request.md b/...corporating-changes-from-a-pull-request/automatically-merging-a-pull-request.md
@@ -17,7 +17,7 @@ shortTitle: Merge PR automatically
 ---
 ## About auto-merge
 
-If you enable auto-merge for a pull request, the pull request will merge automatically when all required reviews are met and status checks have passed. Auto-merge prevents you from waiting around for requirements to be met, so you can move on to other tasks.
+If you enable auto-merge for a pull request, the pull request will merge automatically when all required reviews are met and all required status checks have passed. Auto-merge prevents you from waiting around for requirements to be met, so you can move on to other tasks.
 
 Before you can use auto-merge with a pull request, auto-merge must be enabled for the repository. For more information, see "[Managing auto-merge for pull requests in your repository](/github/administering-a-repository/managing-auto-merge-for-pull-requests-in-your-repository)."
 

@@ -21,9 +21,9 @@ When you use GitHub, you may be given access to lots of additional products and
 By using the Additional Products and Features, you also agree to the applicable GitHub Terms for Additional Products and Features listed below. A violation of these GitHub Terms for Additional Products and Features is a violation of the Agreement. Capitalized terms not defined here have the meaning given in the Agreement.
 
 **For Enterprise users**
-- **GitHub Enterprise Cloud** users may have access to the following Additional Products and Features: Actions, Advanced Security, Advisory Database, Codespaces, Dependabot Preview, GitHub Enterprise Importer, Learning Lab, Packages, and Pages. 
+- **GitHub Enterprise Cloud** users may have access to the following Additional Products and Features: Actions, Advanced Security, Advisory Database, Codespaces, Dependabot Preview, GitHub Enterprise Importer, Packages, and Pages. 
 
-- **GitHub Enterprise Server** users may have access to the following Additional Products and Features: Actions, Advanced Security, Advisory Database, Connect, Dependabot Preview, GitHub Enterprise Importer, Learning Lab, Packages, Pages, and SQL Server Images. 
+- **GitHub Enterprise Server** users may have access to the following Additional Products and Features: Actions, Advanced Security, Advisory Database, Connect, Dependabot Preview, GitHub Enterprise Importer, Packages, Pages, and SQL Server Images. 
 
 - **GitHub AE** users may have access to the following Additional Products and Features: Actions, Advanced Security, Advisory Database, Connect, Dependabot Preview, GitHub Enterprise Importer, Packages and Pages.
 
@@ -106,19 +106,6 @@ GitHub Copilot (i) may, depending on your preferred telemetry settings, collect
 ## GitHub Enterprise Importer
 Importer is a framework for exporting data from other sources to be imported to the GitHub platform. Importer is provided “AS-IS”.
 
-## Learning Lab
-GitHub Learning Lab offers free interactive courses that are built into GitHub with instant automated feedback and help.
-
-*Course Materials.* GitHub owns course materials that it provides and grants you a worldwide, non-exclusive, limited-term, non-transferable, royalty-free license to copy, maintain, use and run such course materials for your internal business purposes associated with Learning Lab use. 
-
-Open source license terms may apply to portions of source code provided in the course materials. 
-
-You own course materials that you create and grant GitHub a worldwide, non-exclusive, perpetual, non-transferable, royalty-free license to copy, maintain, use, host, and run such course materials. 
-
-The use of GitHub course materials and creation and storage of your own course materials do not constitute joint ownership to either party's respective intellectual property.
-
-Use of Personal Data is governed by the [GitHub Privacy Statement](/github/site-policy/github-privacy-statement).
-
 ## npm
 npm is a software package hosting service that allows you to host your software packages privately or publicly and use packages as dependencies in your projects. npm is the registry of record for the JavaScript ecosystem. The npm public registry is free to use but customers are billed if they want to publish private packages or manage private packages using teams. The [npm documentation](https://docs.npmjs.com/) includes details about the limitation of account types and how to manage [private packages](https://docs.npmjs.com/about-private-packages) and [organizations](https://docs.npmjs.com/organizations). Acceptable use of the npm registry is outlined in the [open-source terms](https://www.npmjs.com/policies/open-source-terms). There are supplementary terms for both the npm [solo](https://www.npmjs.com/policies/solo-plan) and [org](https://www.npmjs.com/policies/orgs-plan) plans. The npm [Terms of Use](https://www.npmjs.com/policies/terms) apply to your use of npm.
 

diff --git a/data/features/dependency-review-action-ghes.yml b/data/features/dependency-review-action-ghes.yml
@@ -0,0 +1,4 @@
+# Reference: Issue #7753 Dependency review action has shipped with GHES 3.6 and needs admin docs
+versions:
+  ghes: '>3.5'
+  ghae: 'issue-7753'
diff --git a/data/learning-tracks/admin.yml b/data/learning-tracks/admin.yml
@@ -120,6 +120,7 @@ configure_github_advanced_security:
     - /admin/advanced-security/about-licensing-for-github-advanced-security
     - /admin/advanced-security/enabling-github-advanced-security-for-your-enterprise
     - /admin/advanced-security/configuring-code-scanning-for-your-appliance
+    - /admin/code-security/managing-github-advanced-security-for-your-enterprise/configuring-dependency-review-for-your-appliance
     - /admin/advanced-security/configuring-secret-scanning-for-your-appliance
     - /admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise
 

diff --git a/data/reusables/dependency-review/dependency-review-action-beta-note.md b/data/reusables/dependency-review/dependency-review-action-beta-note.md
@@ -2,4 +2,4 @@
 
 **Note**: The {% data variables.product.prodname_dependency_review_action %} is currently in public beta and subject to change.
 
-{% endnote %}
+{% endnote %}
diff --git a/data/reusables/dependency-review/dependency-review-action-overview.md b/data/reusables/dependency-review/dependency-review-action-overview.md
@@ -1,3 +1,3 @@
 The {% data variables.product.prodname_dependency_review_action %} scans your pull requests for dependency changes and raises an error if any new dependencies have known vulnerabilities. The action is supported by an API endpoint that compares the dependencies between two revisions and reports any differences.
 
-For more information about the action and the API endpoint, see "[About dependency review](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-reinforcement)," and "[Dependency review](/rest/dependency-graph/dependency-review)" in the API documentation, respectively.
+For more information about the action and the API endpoint, see the [`dependency-review-action`](https://github.com/actions/dependency-review-action) documentation, and "[Dependency review](/rest/dependency-graph/dependency-review)" in the API documentation.
Original file line number	Diff line number	Diff line change
Expand Up		@@ -2,4 +2,4 @@

		Note: The {% data variables.product.prodname_dependency_review_action %} is currently in public beta and subject to change.

		{% endnote %}
		{% endnote %}