search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.52k stars 942 forks source link

Dependabot missing project references on Grouped pull requests #9332

Open OwenPattison opened 3 months ago

OwenPattison commented 3 months ago

Is there an existing issue for this?

Package ecosystem

yarn, nuget

Package manager version

latest

Language version

nodejs v20

Manifest location and content before the Dependabot update

n/a

dependabot.yml content

  directory: /api
  schedule:
    interval: daily
  groups:
    entity-framework:
      patterns:
        - "Microsoft*.EntityFrameworkCore*"
  ignore:
    - dependency-name: Microsoft.EntityFrameworkCore*
      update-types: ["version-update:semver-major"]

Updated dependency

I would expect all matching group patterns within my solution which has multiple project patterns:

What you expected to see, versus what you actually saw

2 of 3 projects that reference the pattern were updated however one was missed

this issue is linked to: https://github.com/dependabot/dependabot-core/issues/8552

Native package manager behavior

n/A

Images of the diff or a link to the PR, issue, or logs

image

image

Smallest manifest that reproduces the issue

  directory: /api
  schedule:
    interval: daily
  groups:
    entity-framework:
      patterns:
        - "Microsoft*.EntityFrameworkCore*"
  ignore:
    - dependency-name: Microsoft.EntityFrameworkCore*
      update-types: ["version-update:semver-major"]
Nishnha commented 3 months ago

Hi we had a patch go out that might have fixed this. Could you try the update again and let us know? Thanks!

abdulapopoola commented 2 months ago

Closing out for clarity as there has been no response in the past 2 weeks; @OwenPattison please reactivate if this still occurs.

OwenPattison commented 2 months ago

I have received a new entity framework update today and the same issue occurs, missing on projects references In the update