dependabot / dependabot/dependabot-core
Dependabot conflicts due to indentation because of different whitespace settings
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [x] I have searched the existing issues
### Package ecosystem
GitHub Actions
### Package manager version
_No response_
### Language version
_No response_
### Manifest location and content before the Dependabot update
_No response_
### dependabot.yml content
```yml
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
version: 2
updates:
- package-ecosystem: "github-actions" # See documentation for possible values
directory: "/.github/workflows" # Location of package manifests
schedule:
interval: "daily"
assignees:
- "Sella-GH"
commit-message:
prefix: "[Actions]"
include: "scope"
labels:
- "area-ci"
- "area-dependencies"
```
https://github.com/Sella-GH/AzzyBot/blob/main/.github/dependabot.yml
### Updated dependency
_No response_
### What you expected to see, versus what you actually saw
What happens:
I have my white space settings set to Spaces, 4 Spaces Width and enforce this through an .editorconfig file in the root.
When Dependabot starts updating and filling a PR it rewrites all the white spaces in the file to match Spaces, 2 Spaces Width. This behavior creates conflicts each time when I pull the repo through GitHub Desktop / Visual Studio 2022.
What I expect to happen:
Dependabot respects the existing white space on the files and does not modify it.
Maybe even with a configuration switch to let the user decide which indentation is wanted?
### Native package manager behavior
_No response_
### Images of the diff or a link to the PR, issue, or logs
An example where it just rewrites the whole file:
https://github.com/Sella-GH/AzzyBot/pull/283
### Smallest manifest that reproduces the issue
_No response_
Contributor guide
Research direction
Start with the linked AzzyBot pull request #283, the repository’s .github/dependabot.yml, and its root .editorconfig, comparing the whitespace-only diff with the configured indentation. Then trace the GitHub Actions update path in Dependabot core; done means the formatting behavior is reproduced and a focused behavior or configuration decision is documented and covered.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, ruby
- Domain
- ci-cd, devops
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100