dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PR's.

https://docs.github.com/en/code-security/dependabot

dependabot/dependabot-core Issues

Yarn 3 pnpm: Dependabot not updating lockfile in monorepo
Updated 5 hours ago
Rust: `failed to find a workspace root` for workspace dependency in a non-workspace crate
Updated 5 hours ago
Bump yarn-lib
Closed 5 hours ago6
Regression: Grouped update includes no details about upgrades
Updated 5 hours ago6
Go directive in go.mod not updated when a new dependency requires it
Updated a day ago
Incorrect dependabot alerts when version in `package-lock.json` is outside affected range
Closed a day ago1
pnpm: support needed for its new v9 lockfile format
Updated a day ago1
Poetry dependency containing path to `.whl` file fails
Updated a day ago
Dependabot unable to update project with fuse-python==1.0.7 (pypi) package
Updated 2 days ago
Maven: Handle Malformed expressions or Invalid values present in properties section of the pom.xml file
Updated 2 days ago2
Docker group updates don't ignore unstable versions
Updated 2 days ago
Dependabot doesn't update NuGet version in all projects
Updated 2 days ago3
Dependabot::SharedHelpers::HelperSubprocessFailed: package.json: Name contains illegal characters
Updated 3 days ago
PR description missing package information
Closed 3 days ago2
Psych::AliasesNotEnabled: Alias parsing was not enabled. To enable it, pass `aliases: true` to `Psych::load` or `Psych::saf...
Updated 4 days ago
Use GitHub actions update checker on Documentation
Updated 4 days ago
No PRs due to unclear `update_not_possible`
Updated 4 days ago
Unhandled exception: System.ArgumentException: An item with the same key has already been added.
Updated 4 days ago1
Always run "Get-Project –All | Add-BindingRedirect"
Updated 6 days ago
Dependabot not working with repo that does not persist package-lock.json file
Updated 6 days ago
dependabot's security updates remove path prefixes from
Updated 7 days ago
The process '/usr/bin/docker' failed with exit code 1
Closed 7 days ago1
Migrate from Ubuntu 22.04 to 24.04
Updated 7 days ago
"Conversation" tab for commenting on alerts
Updated 8 days ago
dependabot create wrong PR for actions
Closed 8 days ago2
ArgumentError: blank strings must not be provided as requirements
Updated 8 days ago1
ArgumentError: blank strings must not be provided as versions
Closed 8 days ago3
Dependabot ignores maven exclusions
Updated 8 days ago5
Go toolchain gets removed
Closed 9 days ago1
Private Maven Repo (GitHub Packages): PR contains no GitHub release notes
Updated 9 days ago
dependabot creates pr for sub directory for file in root of module
Updated 9 days ago
Allow access/configure authentication to private (python/poetry) registries hosted by Google Artifact Repository
Updated 9 days ago1
erroring rebase when in 2 version number are to be considered
Updated 9 days ago
Support .NET Tools updates in a repository that only contains a tools manifest
Updated 9 days ago1
Maven version search should search all repositories, not stop after the first `maven-metadata.xml`
Updated 10 days ago
Support for nested terraform code and directories
Updated 11 days ago
Switch out `@octokit/webhooks-types` for `@octokit/openapi-webhooks-types` on upgrade of `@octokit/webhooks` to v13+
Updated 13 days ago
NuGet Package With wildcard version throws error
Updated 14 days ago1
pip with increase-if-necessary strategy fails with TypeError
Updated 14 days ago
Dependabot corrupts gitmodules while trying to update nugets
Updated 15 days ago
Add support for JBang
Updated 15 days ago2
🔁 The Updater And Service Need to Be Kept in Sync Re: Group Names
Updated 15 days ago
Support Custom Files
Updated 16 days ago1
[pip] using same .in file for 2 .txt (hashed and default) only 1 .txt file is updated
Updated 17 days ago
Pipeline fails after bumping 5 packages
Updated 17 days ago
Poetry non package mode cannot update dependencies
Updated 18 days ago1
Dependabot run doesn't time out (hangs)
Closed 19 days ago1
gitsubmodule doesn't work with git forges that don't have various [uploadpack] configuration settings enabled
Updated 19 days ago
PR description doesn't match diff when using lockfile-only
Updated 20 days ago
NuGet updater doesn't honor `packageSourceMapping` from NuGet.Config
Closed 21 days ago