dependabot / dependabot/dependabot-core
Incorrect title/commit message/semver version after updating PR
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [x] I have searched the existing issues
### Package ecosystem
n/a
### Package manager version
_No response_
### Language version
_No response_
### Manifest location and content before the Dependabot update
_No response_
### dependabot.yml content
_No response_
### Updated dependency
_No response_
### What you expected to see, versus what you actually saw
In the following PR:
https://github.com/cartile/reimagined-system/pull/1
I downgraded actions/checkout to v3.6.0, and expected to see the PR updated to be `Bump actions/checkout from 3.6.0 to 4.2.2`, however, it displays `Bump actions/checkout from 4.2.1 to 4.2.2`.
What's also problematic is my `Get Dependabot Pull Request Metadata` believes that the version bump was a patch instead of a major. This would have caused my Auto-Approve / Merge workflow to think it's merging a patch version when it's actually merging a major.
### Native package manager behavior
_No response_
### Images of the diff or a link to the PR, issue, or logs
_No response_
### Smallest manifest that reproduces the issue
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.