You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It looks like Dependabot is not checking dependencies if the version of the dependency is defined through a property AND the property starts with 'project'.
We created a repository explaining the issue in more detail. There you can have a look at the specific commits and the corresponding outputs of the Dependabot check. You can have a look at it here: https://github.com/gbtec-ag/dependabot-version-property-issue
A follow up problem is that Dependabot closes the corresponding PR (if one was created) but never opens the PR again after the property is corrected. Means one needs to reopen the PRs by hand (if available).
The text was updated successfully, but these errors were encountered:
👋 Hey there! Sorry for the glacially slow response... we've been a bit buried the past few years, and only just now starting to dig through some of our backlog.
This issue is pretty old, and we've pushed a lot of bugfixes since then... is this still a valid issue?
It looks like Dependabot is not checking dependencies if the version of the dependency is defined through a property AND the property starts with 'project'.
This is working:
This is not working:
We created a repository explaining the issue in more detail. There you can have a look at the specific commits and the corresponding outputs of the Dependabot check. You can have a look at it here:
https://github.com/gbtec-ag/dependabot-version-property-issue
A follow up problem is that Dependabot closes the corresponding PR (if one was created) but never opens the PR again after the property is corrected. Means one needs to reopen the PRs by hand (if available).
The text was updated successfully, but these errors were encountered: