Clarify Dependabot default ecosystem labels

[travisfortney]

This update was prepared with AI assistance and reviewed before submission.

My account does not have permission to add the llm-generated label. Please add it during triage.

Why:

Closes: #46230

The two articles disagree about when Dependabot applies ecosystem labels. The reusable also lists github-actions as the label name, while Dependabot applies github_actions.

What's being changed:

• Clarify that the default ecosystem label applies even when only one package manager is configured.
• Correct the GitHub Actions label example to github_actions.

This changes two lines in two files. The package-ecosystem: github-actions configuration identifier and custom-label behavior are unchanged.

Validation:

• Content lint passed for both changed files.
• The site build and targeted render tests passed.
• The corrected text rendered at all 14 supported-version URLs for the two affected articles.
• Verified the label name in Dependabot's public implementation and a single-ecosystem example in Neovim's configuration and PR #42242.

Check off the following:

• A subject matter expert has reviewed the technical accuracy of the content. GitHub staff review is requested.
• The changes meet the documentation fundamentals and preserve existing Liquid variables, frontmatter, and links.
• All CI checks are passing and the changes look good in the review environment. Local checks passed; upstream CI and the review environment are pending.

[github-actions]

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

• Spin up a codespace
• Set up a local development environment

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source	Review	Production	What Changed
code-security/reference/supply-chain-security/dependabot-options-reference.md	fpt ghec ghes@ 3.22 3.21 3.20 3.19 3.18	fpt ghec ghes@ 3.22 3.21 3.20 3.19 3.18
code-security/tutorials/secure-your-dependencies/customizing-dependabot-prs.md	fpt ghec ghes@ 3.22 3.21 3.20 3.19 3.18	fpt ghec ghes@ 3.22 3.21 3.20 3.19 3.18	from reusable

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

[subatoi]

Thanks for raising a PR, @travisfortney—is this in fact still in draft?

[travisfortney]

Thanks for checking! I kept it in draft while running the validation checks. Those are complete, and I've now marked it ready for review 👍 Appreciate you!

[subatoi]

Thank you—we'll pass this for review by the appropriate team

[mchammer01]

@travisfortney 👋🏻 - This looks great, thanks for picking this up 🙏

I checked both changes against the issue and they match what we needed.
Small, focused change and it clears up the confusion nicely. Approving this 💖

[github-actions]

Thanks very much for contributing! Your pull request has been merged 🎉 You should see your changes appear on the site in approximately 24 hours. If you're looking for your next contribution, check out our help wanted issues ⚡