Open SaraHelmeIress opened 7 months ago
There are some progress in this issue? Right now I can't merge dependabot PRs in .NET Framework repos because of this inconsistency in assemblyBinding
.
We are managing a legacy project in .NET Framework also and agree experiencing the same issue. Looks like this has been moved to planned but wasn't sure what's to be expected next. Is there going to be a fix for this?
This issue would be fixed by https://github.com/dependabot/dependabot-core/pull/10110, please upvote the PR if this still impacts your .NET Framework projects.
Is there an existing issue for this?
Package ecosystem
NuGet
Package manager version
No response
Language version
The solution targets .NET 4.7.2
Manifest location and content before the Dependabot update
Relevant snippets of files copied below:
.proj file snippet:
packages.config file snippet:
app.config file snippet:
dependabot.yml content
Sensitive data removed and replaced with [text in brackets]
Updated dependency
Bump Microsoft.AspNetCore.Hosting.Server.Abstractions from 2.1.1 to 2.2.0
What you expected to see, versus what you actually saw
Since the update in Dec v0.238.0 we were expecting the update of app/web.config defined bindingRedirect dependencies to be updated alongside .proj and packages.config files. We don't believe there is any additional configuration required to do this. Please see this existing issue for details, the issue has been closed & I cannot reopen it, this is the PR for that issue.
If we update the dependency using VisualStudio then the app.config, the .proj file and the packages.config file all get updated correctly (see next section).
When Dependabot runs we see the .proj file & packages.config file get update whilst the app.config file is ignored and no updates are made. In addition we see additional dependencies updated to the most recent version rather than matching/equivalent version.
Updated .proj file snippet:
Updated packages.config file snippet:
Native package manager behavior
Using VisualStudio we see app.config, .proj & packages.config files all updated as follows:
Updated .proj file snippet:
Updated packages.config file snippet:
Updated app.config file snippet:
Images of the diff or a link to the PR, issue, or logs
No response
Smallest manifest that reproduces the issue
No response