dependabot / dependabot/dependabot-core
Undo ignore this dependency
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 155
Description
I've blocked updating a dependency with `@dependabot ignore this dependency`:
- https://github.com/Taxel/PlexTraktSync/pull/686#issuecomment-1008919057
dependabot responded:
- https://github.com/Taxel/PlexTraktSync/pull/686#issuecomment-1008919094
> OK, I won't notify you about requests-cache again, unless you re-open this PR or update it yourself. 😢
but I can't reopen the pr, because it's already merged:
- https://github.com/Taxel/PlexTraktSync/pull/686#event-5836855879
and I've definitely updated the dependency myself after that (which I created manually as dependabot didn't update):
- https://github.com/Taxel/PlexTraktSync/pull/1222
there's 0.9.8 out now:
- https://github.com/requests-cache/requests-cache/releases/tag/v0.9.8
but version still at 0.9.7 and no dependabot update pull request:
- https://github.com/Taxel/PlexTraktSync/blob/a81ed7797ab9015569442340af4ce36540a006ab/requirements.txt#L30
how to rectify the problem, I want dependabot start updating that dependency again :)
Contributor guide
Research direction
Start by reviewing the linked Dependabot comments and merged pull request 686, then compare the dependency entry at requirements.txt line 30 with the manually created pull request 1222. Determine why requests-cache 0.9.8 is not detected after the ignore was issued; done means Dependabot resumes proposing updates for this dependency.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python, ruby
- Domain
- devtools, tooling
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100