search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.73k stars 1.02k forks source link

Groups are all messed up #10971

Open lishaduck opened 5 days ago

lishaduck commented 5 days ago

Is there an existing issue for this?

Package ecosystem

pub

Package manager version

No response

Language version

Dart 3.5

Manifest location and content before the Dependabot update

https://github.com/PHS-TSA/our_democracy/blob/main/pubspec.yaml https://github.com/PSDTools/app/blob/main/pubspec.yaml

dependabot.yml content

https://github.com/PHS-TSA/our_democracy/blob/main/.github/dependabot.yaml https://github.com/PSDTools/app/blob/main/.github/dependabot.yaml

Updated dependency

appwrite 12 -> 13, freezed_lint 0.0.4 -> 0.0.5

What you expected to see, versus what you actually saw

It'd group them as listed in the yaml config file.

Native package manager behavior

n/a, the issue is with the groups, not the updates themselves.

Images of the diff or a link to the PR, issue, or logs

https://github.com/PSDTools/app/pull/390 https://github.com/PHS-TSA/our_democracy/pull/44 <- (dup: https://github.com/PHS-TSA/our_democracy/pull/47) https://github.com/PHS-TSA/our_democracy/pull/45 <- (same, appwrite shows up again)

Smallest manifest that reproduces the issue

No response