dependabot / dependabot/dependabot-core

Dependabot conflicts due to indentation because of different whitespace settings

Open
#11,531 1 comment 4 reactions 0 assignees View on GitHub
L: github:actions T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Package ecosystem

GitHub Actions

### Package manager version

_No response_

### Language version

_No response_

### Manifest location and content before the Dependabot update

_No response_

### dependabot.yml content

```yml
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates

version: 2
updates:
- package-ecosystem: "github-actions" # See documentation for possible values
directory: "/.github/workflows" # Location of package manifests
schedule:
interval: "daily"
assignees:
- "Sella-GH"
commit-message:
prefix: "[Actions]"
include: "scope"
labels:
- "area-ci"
- "area-dependencies"
```

https://github.com/Sella-GH/AzzyBot/blob/main/.github/dependabot.yml

### Updated dependency

_No response_

### What you expected to see, versus what you actually saw

What happens:
I have my white space settings set to Spaces, 4 Spaces Width and enforce this through an .editorconfig file in the root.
When Dependabot starts updating and filling a PR it rewrites all the white spaces in the file to match Spaces, 2 Spaces Width. This behavior creates conflicts each time when I pull the repo through GitHub Desktop / Visual Studio 2022.

What I expect to happen:
Dependabot respects the existing white space on the files and does not modify it.
Maybe even with a configuration switch to let the user decide which indentation is wanted?

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

An example where it just rewrites the whole file:
https://github.com/Sella-GH/AzzyBot/pull/283

### Smallest manifest that reproduces the issue

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the linked AzzyBot pull request #283, the repository’s .github/dependabot.yml, and its root .editorconfig, comparing the whitespace-only diff with the configured indentation. Then trace the GitHub Actions update path in Dependabot core; done means the formatting behavior is reproduced and a focused behavior or configuration decision is documented and covered.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, ruby
Domain
ci-cd, devops
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.