dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.74k stars 1.03k forks source link

Lock file update fails if project is windows specific #11036

Open na1307 opened 1 day ago

na1307 commented 1 day ago

Is there an existing issue for this?

Package ecosystem

nuget

Package manager version

No response

Language version

No response

Manifest location and content before the Dependabot update

https://github.com/na1307/SimpleSixtarScorecard/blob/86af80a85e30fc97bd4b4deea71e0861c27c98e1/SimpleSixtarScorecard/packages.lock.json

dependabot.yml content

https://github.com/na1307/SimpleSixtarScorecard/blob/86af80a85e30fc97bd4b4deea71e0861c27c98e1/.github/dependabot.yml

Updated dependency

Bluehill.CompilerServices: from 1.1.0 to 1.2.0 JsonSchema.Net: from 7.2.3 to 7.3.0

What you expected to see, versus what you actually saw

dependabot must update the lock file for windows specific projects without any problems.

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

na1307/SimpleSixtarScorecard#18

Smallest manifest that reproduces the issue

No response

na1307 commented 1 day ago

It was me who first wrote the nuget lock file update. I'll submit a PR to fix this.