dependabot / dependabot/dependabot-core
Release notes for Python libraries stopped appearing in PR descriptions
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [x] I have searched the existing issues
### Package ecosystem
pip
### Package manager version
poetry 2.0.1
### Language version
Python 3.12.12
### Manifest location and content before the Dependabot update
/poetry.lock
Note: added the .txt extention to attached file, because Github doesn't allow adding .lock file
[poetry.lock.txt](https://github.com/user-attachments/files/27001609/poetry.lock.txt)
### dependabot.yml content
### Updated dependency
_No response_
### What you expected to see, versus what you actually saw
The changelog and commit sections are currently not present in Dependabot PRs as can be seen on the following screenshot:
Those sections were present in PRs before:
As investigate through PRs shows, those sections stopped being added approximately between March, 30 and April, 4, so we're suspecting that this Dependabot release could have broken some functionality: https://github.com/dependabot/dependabot-core/releases/tag/v0.368.0
Also, we've looked into action logs and have found no API rate limit errors which were mentioned as a potential source of such problem in other issues.
### Native package manager behavior
_No response_
### Images of the diff or a link to the PR, issue, or logs
_No response_
### Smallest manifest that reproduces the issue
_No response_
Contributor guide
Research direction
Start by comparing Dependabot behavior before and after the v0.368.0 release, focusing on Python/pip updates managed through Poetry and the generation of PR descriptions. Use the attached poetry.lock.txt and the reported March 30–April 4 window as investigation points; done means changelog and commit sections consistently reappear in comparable Dependabot PRs without relying on API rate-limit errors.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python, ruby
- Domain
- devtools
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100