Skip to content

fix: update NuGet registry URL to org-scoped format#43571

Merged
Sharra-writes merged 3 commits intogithub:mainfrom
loekensgard:fix/nuget-registry-url-43529
Mar 30, 2026
Merged

fix: update NuGet registry URL to org-scoped format#43571
Sharra-writes merged 3 commits intogithub:mainfrom
loekensgard:fix/nuget-registry-url-43529

Conversation

@loekensgard
Copy link
Copy Markdown
Contributor

@loekensgard loekensgard commented Mar 27, 2026

Why:

Closes: #43529

The documentation example uses https://nuget.pkg.github.com/ as the NuGet feed URL, but this base URL causes HTTP 405 errors when Dependabot tries to resolve packages, resulting in silently skipped updates. The org-scoped format https://nuget.pkg.github.com/OWNER/index.json is the correct URL.

What's being changed:

Updated the example NuGet feed URL in the "Defining registry access for Code Scanning default setup" section from https://nuget.pkg.github.com/ to https://nuget.pkg.github.com/OWNER/index.json.
Used OWNER to match the placeholder convention elsewhere in the NuGet registry docs, but happy to change to ORGANIZATION if that reads more clearly here.

Check off the following:

  • A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
  • The changes in this PR meet the docs fundamentals that are required for all content.
  • All CI checks are passing and the changes look good in the review environment.

The base URL https://nuget.pkg.github.com/ returns HTTP 405 errors when
Dependabot tries to resolve packages. The correct format is the org-scoped
URL with the index.json endpoint.

Fixes github#43529
Copilot AI review requested due to automatic review settings March 27, 2026 19:56
@github-actions github-actions bot added the triage Do not begin working on this issue until triaged by the team label Mar 27, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 27, 2026

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source Review Production What Changed
code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md fpt
ghec
ghes@ 3.20 3.19 3.18
fpt
ghec
ghes@ 3.20 3.19 3.18

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the NuGet feed URL example in the private registries configuration docs to use the org-/owner-scoped NuGet v3 index endpoint, aligning the documentation with the URL format Dependabot can successfully resolve.

Changes:

  • Replaces the NuGet registry example URL from the base host to an owner-scoped /OWNER/index.json URL.

Sharra-writes and others added 2 commits March 30, 2026 14:45
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@Sharra-writes
Copy link
Copy Markdown
Contributor

@loekensgard Looks good! Thanks for the fix.

@Sharra-writes Sharra-writes added this pull request to the merge queue Mar 30, 2026
Merged via the queue into github:main with commit 78c0216 Mar 30, 2026
42 checks passed
@github-actions
Copy link
Copy Markdown
Contributor

Thanks very much for contributing! Your pull request has been merged 🎉 You should see your changes appear on the site in approximately 24 hours. If you're looking for your next contribution, check out our help wanted issues

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

triage Do not begin working on this issue until triaged by the team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

NuGet feed URL https://nuget.pkg.github.com breaks Dependabot, should org-scoped URL be documented?

3 participants