dependabot / dependabot/dependabot-core

Dependabot replace package name instead of version

Open
#11,634 2 comments 1 reaction 0 assignees View on GitHub
L: github:actions L: java:gradle T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 14h
Merged PRs (30d)
156

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Package ecosystem

gradle, github-actions

### Package manager version

gradle 8.12.1

### Language version

_No response_

### Manifest location and content before the Dependabot update

_No response_

### dependabot.yml content

version: 2

updates:
- package-ecosystem: "gradle"
directory: "/"
registries:
- allegro-artifactory
schedule:
interval: "weekly"
open-pull-requests-limit: 100

# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"

### Updated dependency

Image

### What you expected to see, versus what you actually saw

change form:
jackson-dataformat-avro = { group = "com.fasterxml.jackson.dataformat", name = "jackson-dataformat-avro", version = "jackson" }
to:
2.18.2-dataformat-avro = { group = "com.fasterxml.2.18.2.dataformat", name = "2.18.2-dataformat-avro", version = "2.18.2" }

but should be:
jackson-dataformat-avro = { group = "com.fasterxml.jackson.dataformat", name = "jackson-dataformat-avro", version = "jackson" }

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

_No response_

### Smallest manifest that reproduces the issue

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.