search

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.65k stars 1k forks source link

Support `.vcxproj` for NuGet dependencies #9711

Open renefritze opened 4 months ago

renefritze commented 4 months ago

Is there an existing issue for this?

Feature description

We're pulling in native C++ dependencies via NuGets into .vcxproj

AFAICT, at present vcxprojprojects are not considered when discovering which projects' dependencies to consider for an update.

We currently use packages.config files for each solution and import targets files manually.

Is there either a way to "force" dependabot to consider them or can this functionality be added?

Would moving to PackageReference and central version management help?

leeter commented 4 months ago

This previously worked as recently as a few months ago and broke somewhat recently. It was explicitly broken in #9294, the author seems to have assumed that nuget only supplied .net dependencies. So this is not a feature request. It's a regression.

abhijeetnarvekar commented 2 months ago

Can we please get this regression fixed for C++ (.vcxproj) files? We know it worked perfectly fine and loved ❤️ dependabot updating our C++ project nuget dependencies automatically.