Add helm to the versioning-strategy supported package managers

[casey-robertson-paypal]

Why

dependabot/dependabot-core is adding versioning-strategy support for the Helm ecosystem (implementation in dependabot/dependabot-core#15218, requested in dependabot/dependabot-core#15216). The versioning-strategy reference currently lists the supported package managers but omits helm, so there's no way for a user to discover the option applies to Helm short of reading the source.

What's changed

Adds helm to both "Supported by" lists in the versioning-strategy section of the Dependabot options reference (the uv-gated and non-gated variants), keeping the list alphabetical.

Note on timing

This is a companion to dependabot/dependabot-core#15218 and describes behavior that ships once that change is merged and deployed — happy to hold this until then, or adjust to whatever cadence the docs team prefers for new-ecosystem support. Flagging the linkage so it can be sequenced appropriately.

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates the Dependabot options reference to reflect that the versioning-strategy option is supported for Helm ecosystems.

Changes:

• Added helm to the “Supported by” lists for versioning-strategy in both dependabot-uv-support and non-dependabot-uv-support documentation variants.

[github-actions]

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

• Spin up a codespace
• Set up a local development environment

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source	Review	Production	What Changed
code-security/reference/supply-chain-security/dependabot-options-reference.md	fpt ghec ghes@ 3.21 3.20 3.19 3.18 3.17	fpt ghec ghes@ 3.21 3.20 3.19 3.18 3.17

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

[Sharra-writes]

@casey-robertson-paypal Checking in with the Dependabot team to see if they want this added or already have plans to add it themselves.

[casey-robertson-paypal]

Thanks @Sharra-writes! The implementation PR is up on dependabot-core: dependabot/dependabot-core#15218

It's open with all CI green, and @robaiken from the Dependabot team is assigned to it. There's one open question there about default semantics (whether increase should preserve the caret/tilde operator like npm does, vs helm's older exact-pin behavior), so if the wording here needs a small tweak once they land on that, I'll keep this docs PR in sync.

I also just resolved the merge conflict here, so it's mergeable again whenever the team gives the thumbs up.

[casey-robertson-paypal]

Hi @Sharra-writes! Following up — the implementation just merged into dependabot-core: dependabot/dependabot-core#15218 (approved and merged by @robaiken from the Dependabot team). So versioning-strategy support for helm is now on main, which I think resolves the "check with the Dependabot team" question. This docs change should be good to go whenever you have a chance to review. Thanks for your patience!