dependabot / dependabot/dependabot-core

Undo ignore this dependency

Open
#6,489 19 comments 71 reactions 0 assignees View on GitHub
F: dependency-ignores Keep
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
155

Description

I've blocked updating a dependency with `@dependabot ignore this dependency`:
- https://github.com/Taxel/PlexTraktSync/pull/686#issuecomment-1008919057

dependabot responded:
- https://github.com/Taxel/PlexTraktSync/pull/686#issuecomment-1008919094
> OK, I won't notify you about requests-cache again, unless you re-open this PR or update it yourself. 😢

but I can't reopen the pr, because it's already merged:
- https://github.com/Taxel/PlexTraktSync/pull/686#event-5836855879

and I've definitely updated the dependency myself after that (which I created manually as dependabot didn't update):
- https://github.com/Taxel/PlexTraktSync/pull/1222

there's 0.9.8 out now:
- https://github.com/requests-cache/requests-cache/releases/tag/v0.9.8

but version still at 0.9.7 and no dependabot update pull request:
- https://github.com/Taxel/PlexTraktSync/blob/a81ed7797ab9015569442340af4ce36540a006ab/requirements.txt#L30

how to rectify the problem, I want dependabot start updating that dependency again :)

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the linked Dependabot comments and merged pull request 686, then compare the dependency entry at requirements.txt line 30 with the manually created pull request 1222. Determine why requests-cache 0.9.8 is not detected after the ignore was issued; done means Dependabot resumes proposing updates for this dependency.

Written by the indexing model from the issue text.

Assessment

Tech stack
python, ruby
Domain
devtools, tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.