dependabot / dependabot/dependabot-core

Dependabot reformatting entire `Directory.Packages.props` file

Open
#10,463 5 comments 1 reaction 0 assignees View on GitHub
T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Package ecosystem

NuGet

### Package manager version

_No response_

### Language version

.NET 8

### Manifest location and content before the Dependabot update

https://github.com/vezel-dev/celerity/blob/8ca7488846ae9820b2cb43f840590840762cd833/Directory.Packages.props

### dependabot.yml content

https://github.com/vezel-dev/celerity/blob/8ca7488846ae9820b2cb43f840590840762cd833/.github/dependabot.yml

### Updated dependency

_No response_

### What you expected to see, versus what you actually saw

See the linked PRs; Dependabot is reformatting the entire file rather than simply updating a package version as expected.

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

* https://github.com/vezel-dev/celerity/pull/359
* https://github.com/vezel-dev/celerity/pull/360

### Smallest manifest that reproduces the issue

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the linked manifest at Directory.Packages.props and the .github/dependabot.yml configuration, then compare the diffs in pull requests 359 and 360. Trace the NuGet update behavior that produces those diffs and identify the existing tests covering manifest formatting. Done means a package update changes only the intended version rather than reformatting the whole file.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.