Merge pull request #28075 from github/repo-sync

Repo sync

Author: docs-bot

content/code-security/dependabot/dependabot-alerts/about-dependabot-alerts.md

@@ -87,9 +87,7 @@ When {% data variables.product.product_name %} identifies a vulnerable dependenc
 
 {% data variables.product.product_name %} may also notify the maintainers of affected repositories about new alerts according to their notification preferences.{% ifversion dependabot-suppressed-notifications %} When {% data variables.product.prodname_dependabot %} is first enabled, {% data variables.product.product_name %} does not send notifications for all vulnerable dependencies found in your repository, only for new vulnerable dependencies identified after {% data variables.product.prodname_dependabot %} is enabled.{% endif %} For more information, see "[AUTOTITLE](/code-security/dependabot/dependabot-alerts/configuring-notifications-for-dependabot-alerts)."
 
-{% ifversion fpt or ghec or ghes %}
-For repositories where {% data variables.product.prodname_dependabot_security_updates %} are enabled, the alert may also contain a link to a pull request to update the manifest or lock file to the minimum version that resolves the vulnerability. For more information, see "[AUTOTITLE](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates)."
-{% endif %}
+{% data reusables.dependabot.dependabot-alert-create-PR %}
 
 {% warning %}
 

content/code-security/dependabot/dependabot-alerts/configuring-dependabot-alerts.md

@@ -23,6 +23,8 @@ topics:
 
 {% data variables.product.prodname_dependabot %} scans code when a new advisory is added to the {% data variables.product.prodname_advisory_database %} or the dependency graph for a repository changes. When vulnerable dependencies{% ifversion GH-advisory-db-supports-malware %} or malware{% endif %} are detected, {% data variables.product.prodname_dependabot_alerts %} are generated. For more information, see "[AUTOTITLE](/code-security/dependabot/dependabot-alerts/about-dependabot-alerts)."
 
+{% data reusables.dependabot.dependabot-alert-create-PR %}
+
 You can enable or disable {% data variables.product.prodname_dependabot_alerts %} for:
 - Your personal account
 - Your repository

data/reusables/dependabot/dependabot-alert-create-PR.md

@@ -0,0 +1,3 @@
+{% ifversion fpt or ghec or ghes %}
+If you have enabled {% data variables.product.prodname_dependabot_security_updates %} for your repository, the alert may also contain a link to a pull request to update the manifest or lock file to the minimum version that resolves the vulnerability. For more information, see "[AUTOTITLE](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates)."
+{% endif %}