dependabot / dependabot/dependabot-core
Dependabot reformatting entire `Directory.Packages.props` file
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Package ecosystem
NuGet
### Package manager version
_No response_
### Language version
.NET 8
### Manifest location and content before the Dependabot update
https://github.com/vezel-dev/celerity/blob/8ca7488846ae9820b2cb43f840590840762cd833/Directory.Packages.props
### dependabot.yml content
https://github.com/vezel-dev/celerity/blob/8ca7488846ae9820b2cb43f840590840762cd833/.github/dependabot.yml
### Updated dependency
_No response_
### What you expected to see, versus what you actually saw
See the linked PRs; Dependabot is reformatting the entire file rather than simply updating a package version as expected.
### Native package manager behavior
_No response_
### Images of the diff or a link to the PR, issue, or logs
* https://github.com/vezel-dev/celerity/pull/359
* https://github.com/vezel-dev/celerity/pull/360
### Smallest manifest that reproduces the issue
_No response_
Contributor guide
Research direction
Start with the linked manifest at Directory.Packages.props and the .github/dependabot.yml configuration, then compare the diffs in pull requests 359 and 360. Trace the NuGet update behavior that produces those diffs and identify the existing tests covering manifest formatting. Done means a package update changes only the intended version rather than reformatting the whole file.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- tooling
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100