search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.74k stars 1.03k forks source link

Dependabot reformatting entire `Directory.Packages.props` file #10463

Open alexrp opened 3 months ago

alexrp commented 3 months ago

Is there an existing issue for this?

Package ecosystem

NuGet

Package manager version

No response

Language version

.NET 8

Manifest location and content before the Dependabot update

https://github.com/vezel-dev/celerity/blob/8ca7488846ae9820b2cb43f840590840762cd833/Directory.Packages.props

dependabot.yml content

https://github.com/vezel-dev/celerity/blob/8ca7488846ae9820b2cb43f840590840762cd833/.github/dependabot.yml

Updated dependency

No response

What you expected to see, versus what you actually saw

See the linked PRs; Dependabot is reformatting the entire file rather than simply updating a package version as expected.

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

Smallest manifest that reproduces the issue

No response

alexrp commented 3 months ago

Those PRs also seem to be nonsensical in the first place?

eduherminio commented 3 months ago

Those PRs also seem to be nonsensical in the first place?

Nonsensicalness potentially related to https://github.com/dependabot/dependabot-core/issues/10459

dorssel commented 3 months ago

I am experiencing the same issue: https://github.com/dorssel/usbipd-win/pull/1017/files

kaylumah commented 3 months ago

Issue has been appearing for last few weeks, did something change in how the props file is processed?