dependabot / dependabot/dependabot-core
Dependabot replace package name instead of version
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 14h
- Merged PRs (30d)
- 156
Description
### Is there an existing issue for this?
- [x] I have searched the existing issues
### Package ecosystem
gradle, github-actions
### Package manager version
gradle 8.12.1
### Language version
_No response_
### Manifest location and content before the Dependabot update
_No response_
### dependabot.yml content
version: 2
updates:
- package-ecosystem: "gradle"
directory: "/"
registries:
- allegro-artifactory
schedule:
interval: "weekly"
open-pull-requests-limit: 100
# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
### Updated dependency
### What you expected to see, versus what you actually saw
change form:
jackson-dataformat-avro = { group = "com.fasterxml.jackson.dataformat", name = "jackson-dataformat-avro", version = "jackson" }
to:
2.18.2-dataformat-avro = { group = "com.fasterxml.2.18.2.dataformat", name = "2.18.2-dataformat-avro", version = "2.18.2" }
but should be:
jackson-dataformat-avro = { group = "com.fasterxml.jackson.dataformat", name = "jackson-dataformat-avro", version = "jackson" }
### Native package manager behavior
_No response_
### Images of the diff or a link to the PR, issue, or logs
_No response_
### Smallest manifest that reproduces the issue
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.