dependabot / dependabot/dependabot-core

Dependabot is not creating PR

Open
#13,992 1 comment 0 reactions 0 assignees View on GitHub
L: dotnet:nuget
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

We have multiple .net repos. I have setup dependabot in one of my repo, it works as expected. But I’m facing problem with another repo.

This repo has multiple solution files and different folder structure. We have defined all the nuget and other private packages in the central package management file Directory.Packages.props. The Directory.Packages.props file and solution files are not in the same folders in this case.
I’m suspecting that this is the main reason for not working. So can you tell me if there is a way to support this or is it mandatory to have the solution files and Directory.Packages.props file in the same folder. I think should be a way to fix it. I have also tried setting the directory to src, but it also didn’t work.

Folder structure:

src/Directory.Packages.props
src/solution1/solution1.sln
src/solution2/solution2.sln

Dependabot yml file

version: 2
updates:
# --- Main workflow (DO NOT REMOVE) ---
- package-ecosystem: "nuget"
directory: "/"
schedule:
interval: "daily"
time: "18:30"
timezone: "Asia/Kolkata"
open-pull-requests-limit: 5
target-branch: "master" # Default branch
registries:
- nuget-org
- uno
- devops
- engines
- security
groups:
all-dependencies:
patterns:
- "*"
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]

# --- TEMPORARY for testing only ---
- package-ecosystem: "nuget"
directory: "/"
schedule:
interval: "daily"
time: "08:00"
timezone: "Asia/Kolkata"
open-pull-requests-limit: 2
target-branch: "vitara/test-dependabot" # Test feature branch
registries:
- nuget-org
- uno
- devops
- engines
- security
groups:
all-dependencies:
patterns:
- "*"
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]

registries:
nuget-org:
type: nuget-feed
url: "https://api.nuget.org/v3/index.json"

Contributor guide

Open the contributing guide

Research direction

Reproduce the NuGet update with the reported layout: src/Directory.Packages.props, src/solution1/solution1.sln, and src/solution2/solution2.sln, using the shown dependabot.yml entries for directory "/" and "/src". Start by checking how Dependabot discovers Directory.Packages.props relative to solution files. Done means the configuration is either supported with a documented setup or the limitation is clearly identified.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.