Add Bazel support to Dependabot configuration and documentation (#58675)

Co-authored-by: Copilot <[email protected]>
Co-authored-by: Sam Browning <[email protected]>

Author: 3 people

content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md

@@ -205,6 +205,9 @@ The table below shows the package managers for which SemVer is supported.
 
 | Package manager        | SemVer supported |
 |-----------------------|------------------|
+| {% ifversion dependabot-bazel-support %} |
+| Bazel               | {% octicon "x" aria-label="Not supported" %}              |
+| {% endif %} |
 | Bundler               | {% octicon "check" aria-label="Supported" %}              |
 | Bun                   | {% octicon "check" aria-label="Supported" %}              |
 | Cargo                 | {% octicon "check" aria-label="Supported" %}              |
@@ -475,6 +478,9 @@ When `open-pull-requests-limit` is defined:
 
 Package manager | YAML value      | Supported versions |
 ---------------|------------------|:------------------:|
+| {% ifversion dependabot-bazel-support %} |
+| Bazel         | `bazel`          | v7, v8, v9               |
+| {% endif %} |
 | {% ifversion dependabot-bun-support %} |
 | Bun | `bun`         | >=v1.2.5              |
 | {% endif %} |

data/features/dependabot-bazel-support.yml

@@ -0,0 +1,6 @@
+# Reference: #16918
+# Bazel support for Dependabot
+versions:
+  fpt: '*'
+  ghec: '*'
+  ghes: '> 3.19'

data/reusables/dependabot/supported-package-managers.md

@@ -2,6 +2,9 @@
 
 Package manager | YAML value      | Supported versions | Version updates | Security updates | Private repositories | Private registries | Vendoring |
 ---------------|------------------|------------------|:---:|:---:|:---:|:---:|:---:|
+| {% ifversion dependabot-bazel-support %} |
+Bazel | `bazel`         | v7, v8, v9              | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} |
+| {% endif %} |
 | {% ifversion dependabot-bun-support %} |
 [Bun](#bun) | `bun`         | >=v1.1.39               | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} |
 | {% endif %} |

data/reusables/dependency-graph/supported-package-ecosystems.md

@@ -1,5 +1,8 @@
 | Package manager | Languages | Static transitive dependencies | Automatic dependency submission | Recommended files | Additional files |
 | --- | --- | --- | --- | --- | ---|
+| {% ifversion dependabot-bazel-support %} |
+| Bazel | Starlark | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} | `MODULE.bazel`, `WORKSPACE` | `MODULE.bazel.lock`, `maven_install.json`, `*.MODULE.bazel` |
+| {% endif %} |
 | Cargo | Rust | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} | `Cargo.lock` | `Cargo.toml` |
 | Composer             | PHP           | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} | `composer.lock` | `composer.json` |
 | NuGet | .NET languages (C#, F#, VB), C++  | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | `.csproj`, `.vbproj`, `.nuspec`, `.vcxproj`, `.fsproj` | `packages.config` |