dependabot / dependabot/dependabot-core
Dependabot ignores "pull-request-branch-name.separator" option
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
Dependabot began to ignore `pull-request-branch-name.separator` option from YML settings.
Details:
- Dependabot YML file in my repo was not touched last few months
- newly created Pull Request has the wrong branch name separator
- branch name separator option is configured according to the [documentation](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#insecure-external-code-execution)
Here is my `.github/dependabot.yml` file content:
```
version: 2
updates:
- package-ecosystem: bundler
directory: "/"
schedule:
interval: daily
time: "10:00"
timezone: Europe/Berlin
pull-request-branch-name:
separator: "-"
target-branch: dependency-updates
```
Newly created PR with unexpected branch name: (separated by `/`):

Example of existing PR with expected branch name: (separated by `-`), created one week ago:
Contributor guide
Research direction
Start with the reported `.github/dependabot.yml` configuration and compare the configured `pull-request-branch-name.separator` with the generated branch name. Reproduce the issue using the Bundler ecosystem and verify that newly created pull requests use the configured separator; no source file or test is identified in the report.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ruby
- Domain
- devtools
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100