dependabot / dependabot/dependabot-core

Release notes for Python libraries stopped appearing in PR descriptions

Open
#14,935 0 comments 5 reactions 0 assignees View on GitHub
L: python
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Package ecosystem

pip

### Package manager version

poetry 2.0.1

### Language version

Python 3.12.12

### Manifest location and content before the Dependabot update

/poetry.lock
Note: added the .txt extention to attached file, because Github doesn't allow adding .lock file

[poetry.lock.txt](https://github.com/user-attachments/files/27001609/poetry.lock.txt)

### dependabot.yml content

### Updated dependency

_No response_

### What you expected to see, versus what you actually saw

The changelog and commit sections are currently not present in Dependabot PRs as can be seen on the following screenshot:

Image

Those sections were present in PRs before:

Image

As investigate through PRs shows, those sections stopped being added approximately between March, 30 and April, 4, so we're suspecting that this Dependabot release could have broken some functionality: https://github.com/dependabot/dependabot-core/releases/tag/v0.368.0

Also, we've looked into action logs and have found no API rate limit errors which were mentioned as a potential source of such problem in other issues.

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

_No response_

### Smallest manifest that reproduces the issue

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by comparing Dependabot behavior before and after the v0.368.0 release, focusing on Python/pip updates managed through Poetry and the generation of PR descriptions. Use the attached poetry.lock.txt and the reported March 30–April 4 window as investigation points; done means changelog and commit sections consistently reappear in comparable Dependabot PRs without relying on API rate-limit errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
python, ruby
Domain
devtools
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.