dependabot / dependabot/dependabot-core

Incorrect title/commit message/semver version after updating PR

Open
#11,682 2 comments 1 reaction 2 assignees Claimed by @AbhishekBhaskar View on GitHub
L: github:actions T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Package ecosystem

n/a

### Package manager version

_No response_

### Language version

_No response_

### Manifest location and content before the Dependabot update

_No response_

### dependabot.yml content

_No response_

### Updated dependency

_No response_

### What you expected to see, versus what you actually saw

In the following PR:
https://github.com/cartile/reimagined-system/pull/1

I downgraded actions/checkout to v3.6.0, and expected to see the PR updated to be `Bump actions/checkout from 3.6.0 to 4.2.2`, however, it displays `Bump actions/checkout from 4.2.1 to 4.2.2`.

What's also problematic is my `Get Dependabot Pull Request Metadata` believes that the version bump was a patch instead of a major. This would have caused my Auto-Approve / Merge workflow to think it's merging a patch version when it's actually merging a major.

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

_No response_

### Smallest manifest that reproduces the issue

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.