Ignore not working for private package

Is there an existing issue for this?

• I have searched the existing issues

Package ecosystem

nuget

Package manager version

No response

Language version

dotnet 9.0

Manifest location and content before the Dependabot update

No response

dependabot.yml content

version: 2
updates:
  # Monitor NuGet packages
  - package-ecosystem: "nuget"
    directory: "/Source"
    schedule:
      interval: "weekly"
      day: "tuesday"
      time: "08:00"
      timezone: "America/New_York"
    open-pull-requests-limit: 10
    assignees:
      - "anyveldtpasen"
    labels:
      - "dependencies"
    ignore:
      - dependency-name: "OurOrg.CommonServices"
      - dependency-name: "Telerik.*"
    groups:
      minor-and-patch:
        update-types:
          - "minor"
          - "patch"
    commit-message:
      prefix: "chore"
      include: "scope"

Updated dependency

No response

What you expected to see, versus what you actually saw

I expected it to ignore the ignored packages. We want PRs for the nuget packages. Not our private package or the Telerik packages.

There are a number of packages that need updates in nuget, but this action failed as soon as it hit out private package and stopped.

updater | 2025/11/04 13:09:47 ERROR Error type: dependency_not_found

• source: OurOrg.CommonServices
  proxy | 2025/11/04 13:09:47 [608] POST /update_jobs/1143319388/record_update_job_error
  proxy | 2025/11/04 13:09:47 [608] 204 /update_jobs/1143319388/record_update_job_error

I apologize if I am missing something in the config of this, but it seems like a bug for me. This is the first time I've tried this with ignore.

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

No response

Smallest manifest that reproduces the issue

No response

Start with the NuGet update path and the supplied dependabot.yml, especially the ignore entries for OurOrg.CommonServices and Telerik.*; compare that configuration with the dependency_not_found log. Done means an ignored private package no longer stops the update job and updates for other NuGet packages still proceed.